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Foreword 

(This foreword is not part of American National Standard NCITS 306-199X.) 


This SCSI command set is designed to provide efficient peer-to-peer operation of input/output logical 
units by an operating system using block transfers. The SCSI command set assumes an underlying 
command-response protocol. 

This SCSI command set provides multiple operating systems concurrent control over one or more 
input/output logical units. However, the multiple operating systems are assumed to properly coordinate- 
ordinate their actions to prevent data corruption. This SCSI standard provides commands that assist with 
coordination between multiple operating systems. However, details of the coordination are beyond the 
scope of the SCSI command set. 

This standard defines a logical unit model for SCSI block logical units. Also defined are SCSI commands 
that apply to SCSI block logical units. 

This standard was developed by T10 during 1990 through 1996. Most of its features have been tested in 
products implementing extensions of prior SCSI standards. 

This standard contains two informative annexes that are not considered part of this standard. 

Requests for interpretation, suggestions for improvement or addenda, or defect reports are welcome. 
They should be sent to the National Committee for Information Technology Standards (NCITS, ITI, 1250 
Eye Street, NW, Suite 200, Washington, DC 20005. 

This standard was processed and approved for submittal to ANSI by NCITS. Committee approval of this 
standard does not necessarily imply that all committee members voted for its approval. At the time it 
approved this standard, NCITS had the following members: 


(@@@ Insert NCITS members @@@) 
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Introduction 


This standard is divided into seven clauses and two annexes: 

Clause 1 is the scope. 

Clause 2 lists the normative references that apply to this standard. 

Clause 3 describes the definitions, symbols, and abbreviations used in this standard. 

Clause 4 provides an overview of the block device class and the command set. This clause 
also specifies the conventions used throughout the standard. 

Clause 5 describes models for the various categories of block devices. 

Clause 6 provides the definitions of all commands unique to block devices. This clause also 
provides references to the ANSI NCITS 301-199X SPC standard for primary commands used 
with this logical unit class. 

Clause 7 provides the definition of all parameters unique to this logical unit class. 

Annex A provides XOR command examples. 

Annex B is the bibliography. 
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AMERICAN NATIONAL STANDARD 


ANSI NCITS 306-199X 


American National Standard for 
Information Technology - 

SCSI-3 Block Commands (SBC) 

1 Scope 

This standard defines the command set extensions to facilitate operation of SCSI block devices. The 
clause(s) of this standard pertaining to the SCSI block device class, implemented in conjunction with the 
applicable clauses of the ANSI NCITS 301 -199X SCSI-3 Primary Commands (SPC), fully specify the 
standard command set for SCSI block devices. 

The objective of this standard is to provide the following: 

a) Permit an application client to communicate with a logical unit that declares itself to be a direct- 
access device, write-once device, and optical memory device in the device type field of the 
INQUIRY command response data over an SCSI service delivery subsystem; 

b) Define commands unique to the type of SCSI block devices; 

c) Define commands to manage the operation of SCSI block devices; 

d) Define the differences between types of SCSI block devices. 


Common Access Method 




Device-Type Specific Command Sets 

_ 


T> 

O 

2 


Shared Command Set (for all device types) 

l 


O 

< 


Transport Protocols 





Physical Interconnects 


Figure 1 - SCSI standards - general structure 

Figure 1 is intended to shows the general structure of SCSI standards. The figure is not intended to imply 
a relationship such as a hierarchy, protocol stack, or system architecture. It indicates the applicability of a 
standard to the implementation of a given transport. 
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At the time this standard was generated examples of the SCSI general structure included: 


Physical Interconnects: 

Fibre Channel Arbitrated Loop [ANSI X3.272-1996] 

Fibre Channel - Physical and Signaling Interface [ANSI X3.230-1994] 

High Performance Serial Bus [IEEE 1394-1995] 

SCSI-3 Parallel Interface [ANSI X3.253-1995] 

SCSI-3 Fast-20 Parallel Interface [ANSI X3.277.1996] 

SCSI Parallel Interface -2 [ANSI NCITS 302-199X] 

Serial Storage Architecture Physical Layer 1 [ANSI X3.293-1996] 

Serial Storage Architecture Physical Layer 2 [ANSI NCITS 307-199X] 

Transport Protocols: 

SCSI-3 Interlocked Protocol [ANSI X3.292-1997] 

Serial Storage Architecture Transport Layer 1 [ANSI X3.295-1996] 

SCSI-3 Fibre Channel Protocol [ANSI X3.269-1996] 

SCSI-3 Fibre Channel Protocol - 2 [NCITS T10/1144D] 

SCSI-3 Serial Bus Protocol [ANSI NCITS X3.268-Withdrawn] 

SCSI Serial Bus Protocol -2 [NCITS T10/1155D] 

Serial Storage Architecture SCSI-2 Protocol [ANSI X3.294-1996] 

Serial Storage Architecture SCSI-3 Protocol [ANSI NCITS 309-199X] 

Serial Storage Architecture Transport Layer 2 [ANSI NCITS 308-199X] 

Shared Command Set: 

SCSI-3 Primary Commands [ANSI NCITS 301-199X] 

Device-Type Specific Command Sets: 

SCSI-3 Block Commands (this standard) 

SCSI-3 Enclosure Services [ANSI NCITS 305-199X] 

SCSI-3 Stream Commands [NCITS T10/997D] 

SCSI-3 Medium Changer Commands [NCITS T10/999D] 

SCSI-3 Controller Commands [ANSI X3.276-1997] 

SCSI-3 Controller Commands - 2 [NCITS T10/1255D] 

SCSI-3 Multimedia Command Set [ANSI NCITS 304-199X] 

SCSI-3 Multimedia Command Set - 2 [NCITS T10/1228D] 

Architecture Model: 

SCSI-3 Architecture Model [ANSI X3.270-1996] 

SCSI-3 Architecture Model - 2 [NCITS T10/1157D] 

Common Access Method: 

SCSI Common Access Method [ANSI X3.232-1996] 

SCSI Common Access Method - 3 [NCITS T10/990D] 

The term SCSI is used wherever it is not necessary to distinguish between the versions of SCSI. The 
Small Computer System Interface -2 (ANSI X3.131-1994) is referred to herein as SCSI-2. The term 
SCSI-3 in this standard refers to versions of SCSI defined since SCSI-2. 

2 Normative References 

The following standards contain provisions that, through reference in the text, constitute provisions of this 
American National Standard. At the time of publication, the editions indicated were valid. All standards 
are subject to revision, and parties to agreements based on this American National Standard are 
encouraged to investigate the possibility of applying the most recent editions of the standards listed 
below. 

Copies of the following documents can be obtained from ANSI: Approved ANSI standards, approved and 
draft international and regional standards (ISO, IEC, CEN/CENELEC, ITU-T), and approved standards of 
other countries (including BSI, JIS, and DIN). For further information, contact ANSI’s Customer Service 
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Department at 212-642-4900 (telephone), 212-302-1286 (fax) or via the World Wide Web at 
http://www.ansi.org. 

Additional availability contact information is provided below as needed. 

2.1 Approved references 

ANSI X3.270-1996, Information technology - SCSI-3 Architecture Model (SAM) 

ANSI X3.276-1997, Information technology - SCSI-3 Controller Commands 
ANSI NCITS, Information technology - SCSI-3 Primary Commands 

2.2 References under development 

At the time of publication, the following referenced standard was still under development. For information 
on the current status of the document, or regarding availability, contact the relevant standards body as 
indicated. 

NCITS T10/999D, Information technology - SCSI-3 Medium Changer Commands 

Note 1 - For more information on the current status of the document, contact the X3 Secretariat 
at 202-737-8888 (telephone), 202-638-4922 (fax) or via Email at x3sec@itic.nw.dc.us. To obtain 
copies of this document, contact Global Engineering at 15 Inverness Way East Englewood, CO 
80112-5704 at 800-854-7179 (telephone), 303-792-2181 (telephone), or 303-792-2192 (fax). 

3 Definitions, symbols, and abbreviations 

3.1 Definitions 

3.1.1 Definitions specific to direct access devices 

3.1.1.1 block device: A device that is capable of containing data stored in blocks that have a 
unique logical block address. 

3.1.1.2 cache memory: A temporary (and often volatile) data storage area outside the user- 
accessible area that may contain a subset of the data stored in the non-volatile data storage area. A 
cache memory is usually faster to access than the medium and thus has the effect of increasing data 
throughput by reducing the number of accesses to the medium. 

3.1.1.3 check data: Information contained within a redundancy group that allows lost or destroyed 
user data to be recreated. 

3.1.1.4 data-in buffer: The buffer identified by the application client to receive data from the 
device server during the execution of a command. 

3.1.1.5 data-out buffer: The buffer identified by the application client to supply data that is sent 
from the application client to the device server during the execution of a command. 

3.1.1.6 domain: An I/O system consisting of a set of SCSI devices that interact with one another by 
means of a service delivery subsystem. 

3.1.1.7 exclusive-or: A logical function that combines two logical inputs producing a logical output 
true state if one but not both inputs are true. This function is used in error correction algorithms. In this 
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standard the term encompasses the entire algorithm but does not define the specific polynomial. The 
exclusive-or operation may be performed by the storage array controller or by the storage device. 

3.1.1.8 extent: An extent is a specified number of logical blocks and all or part of a block device. 

3.1.1.9 host: Any combination of initiators and application clients that form a device managing one or 
more peripheral devices. 

3.1.1.10 logical block: A unit of data supplied or requested by an initiator. 

3.1.1.11 non-volatile medium: A physical storage medium that retains data written to it for a 
subsequent read operation through power off/on cycles. An example of this is a disk within a device that 
stores data as magnetic field changes that do not require device power to exist. 

3.1.1.12 notch: A notch refers to all or part of the medium having a consistent set of geometry 
parameters. Notches are used to increase storage capacity by optimizing the number of bytes per track 
between the inner and outer tracks. 

3.1.1.13 redundancy group: A grouping of protected space and associated check data into a 
single type of data redundancy (see ANSI X3.276 SCC). This standard only supports the exclusive-or 
type of redundancy. 

3.1.1.14 storage array controller: Any combination of an initiator and application clients (see 
ANSI X3.270 SAM) that originates SCSI command descriptor blocks and performs the services of a 
SACL. A storage array controller organizes a group of storage devices into various objects (e.g., 
redundancy groups, volume sets, etc.). 

3.1.1.15 storage array conversion layer (SACL): Converts input logical unit numbers to 
output logical unit numbers and may convert input logical block addresses to output logical block 
addresses. 

3.1.1.16 third party: When used in conjunction with exclusive-or operations refers to the operations 
performed by a primary target with a secondary target on behalf of the host storage array controller. 

3.1.1.17 user-accessible: The area of the medium that can be read from or written to by READ 
and WRITE commands. 

3.1.1.18 user data: The addressable logical blocks that are input to the SACL. Check data is not 
part of the addressable logical blocks. 

3.1.1.19 volatile medium: Medium that does not retain data written to it for a subsequent read 
operation through power off/on cycles. An example of this is a silicon memory device that loses data 
written to it if device power is lost. 

3.1.2 Definitions specific to optical memory block devices and to write-once 
block devices 

3.1.2.1 blank: The logical block contains no information detectable by the block device, or is written 
with a pattern that appears to the block device as no data present. The logical block is considered ready 
for a write operation. 
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3.1.2.2 generation: Indicates a relative revision level of a logical block that has been updated via 
the UPDATE BLOCK command. A logical block that has never been updated has only one generation 
associated with it. 


3.1.2.3 read-only medium: This is medium that is not to be written by the application client. The 
medium contains data prepared in a manner not defined by this standard. 

3.1.2.4 update: To write new data to a logical block without destroying the previous data. After a 
block has been updated, a normal read returns the most recent generation of the data. Earlier 
generations are still available after the update. 


3.1.2.5 write-once medium: This is medium that is to be written only once by any application 
client. Logical blocks on write-once media that have not been written are considered blank. Logical 
blocks on write-once media that have been written are not to be written again. 

3.2 Symbols and abbreviations 


CDB 

command descriptor block 

I/O 

input/output 

ID 

identifier 

LSB 

least significant bit 

MMC 

SCSI-3 Multimedia Command Set [ANSI NCITS 304] 

MSB 

most significant bit 

SAM 

SCSI-3 Architecture Model [ANSI X3.270] 

see 

SCSI-3 Controller Commands [ANSI X3.276] 

SCSI 

either SCSI-2 or SCSI-3 

SCSI-2 

the Small Computer System Interface-2 [X3.131] [ISO/IEC 9316-1:1996] 

SCSI-3 

the Small Computer System Interface-3 

SPC 

SCSI-3 Primary Command Set standard [ANSI NCITS 301] 

XOR 

exclusive-or 

3.3 Keywords 


Several keywords are used to differentiate between different levels of requirements and optionality, as 

follows: 


3.3.1 expected: Used to describe the behavior of the hardware or software in the design models 
assumed by this standard. Other hardware and software design models may also be implemented. 


3.3.2 mandatory: Indicates items required to be implemented as defined by this standard. 

3.3.3 may: Indicates flexibility of choice with no implied preference. 

3.3.4 obsolete: Indicates items that were defined in prior SCSI standards but have been removed 
from this standard. 


3.3.5 optional: Describes features that are not required to be implemented by this standard. 
However, if any optional feature defined by the standard is implemented, it shall be implemented as 
defined by this standard. 


3.3.6 reserved: Refers to bits, bytes, words, fields, and code values that are set aside for future 
standardization. Their use and interpretation may be specified by future extensions to this or other 
standards. A reserved bit, byte, word, or field shall be set to zero, or in accordance with a future 
extension to this standard. The recipient may not check reserved bits, bytes, words, or fields. Receipt 
of reserved code values in defined fields shall be treated as an error. 


dpANS SCSI-3 Block Commands (SBC) 


5 



3.3.7 shall: Indicates a mandatory requirement. Designers are required to implement all such 
mandatory requirements to ensure interoperability with other standard conforment products. 

3.3.8 should: Indicates flexibility of choice with a strongly preferred alternative. Equivalent to the 
phrase “it is recommended.” 

3.3.9 vendor-specific: Items (e.g., a bit, field, code value, etc.) that are not defined by this 
standard and may be vendor defined. 


3.4 Conventions 

Lower case is used for words having the normal English meaning. Certain words and terms used in this 
standard have a specific meaning beyond the normal English meaning. These words and terms are 
defined either in clause 3 or in the text where they first appear. 

Listed items in this standard do not represent any priority. Any priority is explicitly indicated. Formal lists 
(e.g., (a) red; (b) blue; (c) green) canoted by letters are in an arbitrary order. Formal lists (e.g., (1) red; 
(2) blue; (3) green) canoted by numbers are in a required sequential order. 

If a conflict arises between text, tables, or figures, the order of precedence to resolve conflicts is text; 
then tables; and finally figures. Not all tables or figures are fully described in text. Tables show data 
format and values. 

The ISO convention of numbering is used (i.e., the thousands and higher multiples are separated by a 
space and a comma is used as the decimal point as in 65 536 or 0,5). 

The additional conventions are: 


a) The names of abbreviations, commands, and acronyms used as signal names are in all 
uppercase (e.g., IDENTIFY DEVICE); 

b) Fields containing only one bit are referred to as the "name" bit instead of the "name" field; 

c) Field names are in small caps to distinguish them from normal English; 

d) Numbers that are not immediately followed by lower-case b or h are decimal values; 

e) Numbers immediately followed by lower-case b (xxb) are binary values; 

f) Numbers immediately followed by lower-case h (xxh) are hexadecimal values; 

g) The most significant bit of a binary quantity is shown on the left side and represents the highest 
algebraic value position in the quantity; 

h) If a field is specified as not meaningful or it is to be ignored, the entity that receives the field 
shall not check that field. 


4 General 
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SCSI devices that conform to this standard are referred to as SCSI block devices. This includes the 
category of logical units commonly referred to as flexible disks, rigid disks, removable rigid disks, 
erasable optical discs, write once optical discs, and read only optical discs. The ANSI NCITS 304, 
Information technology - SCSI-3 Multimedia Command Set (MMC) standard is typically used by CD-ROM 
devices. 

The common attribute of block devices is that they are block addressable (i.e., the data are addressed 
on the block device in groups referred to as logical blocks). The number of bytes of data contained in a 
single logical block is the block length. The block length is almost always greater than one byte and 
may be a multiple of 512 bytes. In addition, a logical block is not required to bear any relation to the 
physical block size of the storage medium. 

Each logical block has a block length associated with it. This means that the block length for the medium 
can change from logical block to logical block. However, for simplicity the block length typically remains 
constant over the entire capacity of the medium. 

This standard is intended to be used in conjunction with the ANSI X3.270, Information technology - SCSI- 
3 Architecture Model (SAM) standard, the ANSI NCITS 301, Information technology - SCSI-3 Primary 
Command Set (SPC) standard, with the XOR functions of the ANSI NCITS 276, Information technology - 
SCSI-3 Controller Commands Set (SCC) standard, and where specified NCITS T10/999D, Information 
technology - SCSI-3 Medium Changer Commands 


5 SCSI block device models 

5.1 Direct-access device type model 

Direct-access block devices store blocks of data for later retrieval. Each block of data is stored at a 
unique logical block address. An application client issues WRITE commands to store the blocks of data 
(write operations) and READ commands to retrieve the blocks of data (read operations). Other 
commands issued by the application client may also cause write and read operations to occur. A write 
operation causes one or more blocks of data to be written on the medium. A read operation causes one 
or more blocks of data to be read from the medium. A verify operation confirms that one or more blocks 
of data were correctly written and can be read without error from the medium. 

Blocks of data are stored by a process that causes localized changes or transitions within the medium. 
The changes made to the medium to store the blocks of data may be volatile (i.e., not retained through 
off/on power cycles) or non-volatile (i.e., retained through power off/on cycles). The medium may be 
divided in parts that are used for data blocks, parts that are reserved for defect management, and parts 
that are reserved for use by the controller for the management of the block device. 


5.1.1 Removable medium 

The medium may be removable (e.g., used in a floppy disk device) or non-removable (e.g., used in a 
fixed disk device). The removable medium may be contained within a cartridge (or jacket) to prevent 
damage to the recording surfaces. The combination of medium and cartridge is often called a removable 
volume. 

A removable volume has an attribute of being mounted or de-mounted on a suitable transport 
mechanism. A removable volume is mounted when the direct access block device is capable of 
performing write or read operations to the medium. A mounted removable volume may not be 
accessible by an initiator if it is reserved by another initiator. A removable volume is de-mounted at any 
other time (e.g., during loading, unloading, or storage). 

An application client may check whether a removable volume is mounted by issuing a TEST UNIT 
READY command. A volume that is loaded may need a START STOP UNIT command issued to 
become accessible for write or read operations. 
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The PREVENT ALLOW MEDIUM REMOVAL command allows an application client to restrict the 
demounting of the removable volume. This is useful in maintaining system integrity. If the direct-access 
block device implements cache memory, it ensures that all logical blocks of the medium contain the 
most recent data prior to permitting demounting of the removable volume. If the application client issues 
a START STOP UNIT command to eject the removable volume, and the direct-access block device is 
prevented from demounting by the PREVENT ALLOW MEDIUM REMOVAL command, the START 
STOP UNIT command is rejected by the device server. 

5.1.1.1 Removable medium with an attached medium changer 

When a block device is served by a medium changer, control over a media transport element may be 
done using media changer commands sent to the logical unit. 

The block device indicates its ability to support these commands by setting the mchngr bit to one in its 
standard INQUIRY data. An mchngr bit of one indicates that the MOVE MEDIA and READ ELEMENT 
STATUS commands are supported. Only one medium transport element is permitted (element 0) and 
only one data transfer element is permitted. 


5.1.2 Logical blocks 

Blocks of data are stored on the medium along with additional information that the medium controller 
uses to manage the storage and retrieval. The format of the additional information is defined by other 
standards or is vendor-specific and is hidden from the application client during normal read or write 
operations. This additional information may be used to identify the physical location of the blocks of data 
and the address of the logical block, and to provide protection against the loss of user data. 

The address of the first logical block is zero. The address of the last logical block is [n-1], where [n] is 
the number of logical blocks available to the application client on the medium. A READ CAPACITY 
command may be issued to determine the value of [n-1]. If a command is issued that requests access to 
a logical block not within the capacity of the medium, the command is terminated with CHECK 
CONDITION status and the additional sense key shall be set to LOGICAL BLOCK ADDRESS OUT OF 
RANGE with the additional sense code set to ILLEGAL REQUEST. 

The number of bytes of data contained in a logical block is the block length. Each logical block has a 
block length associated with it. The block descriptor in the MODE SENSE data describes the block 
lengths that are used on the medium. The FORMAT UNIT command may be required to change the 
block length of block devices that support variable block lengths. 

The location of a logical block on the medium is not required to have a relationship to the location of any 
other logical block. However, in a typical block device the logical blocks are located in an ascending 
order. The time to access the logical block at address [x] and then the logical block at address [x+1] 
need not be less than time to access [x] and then [x+100]. The READ CAPACITY issued with a pmi bit of 
one may be useful in determining where longer access times occur. 


5.1.3 Ready state 

A direct-access block device is ready when medium access commands can be executed. A block device 
using removable media is not ready until a volume is mounted. Such a block device, with a volume not 
mounted, shall terminate medium access commands with CHECK CONDITION status and the sense key 
shall be set to NOT READY with the appropriate additional sense code for the condition. 

Some direct-access block devices may be switched from being ready to being not ready by using the 
START STOP UNIT command. An application client may need to issue a START STOP UNIT 
command with a start bit set to bring a block device ready. 


5.1.4 Power conditions 
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The optional power conditions permit the application client to modify the behavior of a block device in a 
manner that may reduce the required power. There is no notification to the application client that a block 
device has entered one of the power conditions. The power conditions may be controlled by the START 
STOP UNIT command or the power condition page of the MODE SELECT command. If both methods 
are being used on the same target/logical unit combination then any START STOP UNIT commands 
power condition request shall override the power condition page’s power control. See the START STOP 
UNIT command description and the MODE SELECT power condition page description for more 
information. (See 6.1.14 and 7.1.3.6.) 

No power condition shall affect the SCSI bus. 

The lowest power consumption, with power applied, occurs in the Sleep condition. When in the Sleep 
condition a block device requires a WAKEUP task management function to be activated. 

In the Standby condition a block device is capable of accepting commands, but media is not immediately 
accessible (e.g., the spindle is stopped). 

In the Idle condition a block device is capable of responding quickly to media access requests. However, 
a block device in the idle condition may take longer, than in the active condition, to complete the 
execution of a command because it may have to activate some circuitry. 

In the Active condition a block device is capable of responding immediately to media access requests, 
and operations complete execution in the shortest time compared to the other power conditions. 

Block devices that contain cache memory shall implicitly perform a SYNCHRONIZE CACHE command 
for the entire medium prior to entering any power condition that prevents access the media (e.g., the 
spindle being stopped). 

If implemented, the block device shall use the optional power condition page to control the power 
conditions after a power on or a WAKEUP task management function until a START STOP UNIT 
command is received with the power conditions field set to a value other than Oh or 7h. See 6.1.14 and 
7.1.3.6. 

Figure 2 shows the flow control between the different power conditions in a device that is setup to adjust 
itself automatically to the power condition that allows any command to execute. 
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(Active, Idle, or Standby - see (f)) 

a) Path 1: An idle time-out or a START STOP UNIT command with a power condition code of Ah. 

b) Path 2: Any command that can be executed within the power constraints of the Idle power 
condition. 

c) Path 3: A standby time-out, or a START STOP UNIT command with a power condition code of 
Bh. 

d) Path 4: Any command that exceeds the power constraints of the Idle power condition. 

e) Path 5: A START STOP UNIT command with a power condition code 5h. 

f) Path 6: A WAKEUP task management function returns the device to the state defined by the 
saved power mode page parameters. 

g) Path 7: This path only occurs if the idle bit is set equal to zero. 

Figure 2 - SCSI power conditions flow control (automatic switching) 


Figure 3 shows the flow control between the different power conditions in a device that is setup to only 
allow changing of the power condition by the application client. Any command received that requires 
more power than allowed by the most recent power condition setting shall be terminated with a sense key 
of ILLEGAL REQUEST and the additional sense code shall be set to LOW POWER CONDITION 
ACTIVE. 
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(Active, Idle, or Standby - see (f)) 

a) Path 1: A START STOP UNIT command with a power condition code of 2h. 

b) Path 2: A START STOP UNIT command with a power condition code of 2h. 

c) Path 3: A START STOP UNIT command with a power condition code of 3h. 

d) Path 4: A START STOP UNIT command with a power condition code of 1 h. 

e) Path 5: A START STOP UNIT command with a power condition code 5h. 

f) Path 6: A WAKEUP task management function returns the device to the state defined by the 
saved power mode parameters. 

Figure 3 - SCSI power conditions flow control (controlled switching) 

5.1.5 Initialization 

Direct-access block devices may require initialization prior to write or read operations. This initialization 
is performed by a FORMAT UNIT command. Parameters related to the geometry and performance 
characteristics may be set with the MODE SELECT command prior to the format operation. Some block 
devices are initialized by means not specified in this standard. The time when the initialization occurs is 
specific to the implementation of the direct-access block device. 

Block devices using a non-volatile medium may save the parameters and only need to be initialized 
once. However, some mode parameters may need to be initialized after each power-on and/or reset. A 
catastrophic failure of the direct-access block device may require the FORMAT UNIT command to be 
reissued. 

Block devices that use a volatile medium may need to be initialized at each power-on and/or reset prior 
to the execution of read or write operations. Mode parameters may also need initialization. 


5.1.6 Medium defects 

Any medium has the potential for defects that can cause user data to be lost. Therefore, each logical 
block may contain information that allows the detection of changes to the user data caused by defects in 
the medium or other phenomena, and may also allow the data to be reconstructed following the detection 
of such a change. Some block devices provide the application client control through use of the mode 
parameters. Some block devices allow the application client to examine and modify the additional 
information by using the READ LONG and WRITE LONG commands. 
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Defects may also be detected and managed during execution of the FORMAT UNIT command. The 
FORMAT UNIT command defines four sources of defect information. These defects may be reassigned 
or avoided during the initialization process so that they do not appear in a logical block. 

Defects may also occur after initialization. The application client issues a REASSIGN BLOCKS 
command to request that the specified logical block address be reassigned to a different part of the 
medium. This operation may be repeated if a new defect appears at a later time. The total number of 
defects that may be handled in this manner can be specified in the mode parameters. 

Defect management on direct-access block devices is vendor-specific. Block devices not using a 
removable medium may optimize the defect management for capacity or performance or both. Some 
block devices that use a removable medium do not support defect management (e.g., some floppy disk 
devices) or use defect management that does not impede the ability to interchange the medium. 


5.1.7 Cache memory 

Some direct-access block devices implement cache memory. A cache memory is usually an area of 
temporary storage in the direct-access block device with a fast access time that is used to enhance 
performance. It exists separately from the blocks of stored data and is not directly accessible by the 
application client. Use of cache memory for write or read operations may reduce the access time to a 
logical block and can increase the overall data throughput. 

During read operations, the direct-access block device uses the cache memory to store blocks of data 
that the application client may request at some future time. The algorithm used to manage the cache 
memory is not part of this standard. However, parameters are provided to advise the device server 
about future requests, or to restrict the use of cache memory for a particular request. 

During write operations, the direct-access block device uses the cache memory to store data that is 
written to the medium at a later time. This is called write-back caching. The command may complete 
prior to blocks of data being written to the medium. As a result of using a write-back caching there is a 
period of time when the data may be lost if power to the device is lost or a hardware failure occurs. There 
is also the possibility of an error occurring during the subsequent write operation. If an error occurred 
during the write, it may be reported as a deferred error on a later command. The application client may 
request that write-back caching be disabled to prevent detected write errors from being reported by 
deferred errors. Even with write-back caching disabled undetected write errors may occur. In order to 
detect these errors, verify commands are provided. 

When the cache memory fills up with blocks of data that are being kept for possible future access, new 
blocks of data that are to be kept replace those currently in cache memory. The disable page out (dpo) 
bit allows the application client to influence the replacement of logical blocks in the cache. For write 
operations, setting this bit to one advises the device server to not replace existing blocks in the cache 
memory with the write data. For read operations, setting this bit to one causes blocks of data that are 
being read to not replace existing ones in the cache memory. 

Sometimes the application client may want to have the blocks of data read from the medium instead of 
from the cache memory. The force unit access (fua) bit is used to indicate that the device server shall 
access the physical medium. For a write operation, setting fua to one causes the device server to 
complete the data write to the physical medium before completing the command. For a read operation, 
setting fua to one causes the logical blocks to be retrieved from the physical medium. 

When the dpo and fua bits are both one, write and read operations, in effect, bypass the cache memory. 

When a VERIFY command is executed, a forced unit access is implied, since the blocks of data stored 
on the medium are being verified. Furthermore, a SYNCHRONIZE CACHE operation is also implied to 
write unwritten blocks of data still in the cache memory. These blocks of data are stored on the medium 
before the verify operation begins. The dpo bit is provided since the VERIFY command may cause the 
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replacement of blocks in the cache. The caching rules also applies to the WRITE AND VERIFY 
command. 


Commands may be implemented by the device server that allow the application client to control other 
behavior of the cache memory: 


a) the LOCK UNLOCK CACHE command controls whether certain logical blocks shall be held in 
the data cache for future use. Locking a logical block prevents its replacement by a future 
access. Unlocking a logical block exposes it to possible replacement by a future access (see 
6 . 1 . 2 ); 


b) the PRE-FETCH command causes a set of logical blocks requested by the application client to 
be read into the data cache for possible future access. The blocks fetched are subject to later 
replacement unless they are locked (see 6.1.3); 


c) the SYNCHRONIZE CACHE command forces any pending write data in the requested set of 
logical blocks to be stored in the physical medium. This command may be used to ensure that 
the data was written and any detected errors reported (see 6.1.15); 


d) the MODE SELECT command defines a page for the control of cache behavior and handles 
certain basic elements of cache replacement algorithms (see ANSI NCITS 301 SPC). 


5.1.8 Reservations 

The access enabled or access disabled condition determines when an application client may store or 
retrieve user data on all or part of the medium. Access may be restricted for read operations, write 
operations, or both. This attribute may be controlled by an external mechanism or by the RESERVE and 
RELEASE commands (see ANSI NCITS 301 SPC). 

The RESERVE and RELEASE commands define how different types of restricted access may be 
achieved, and to whom the access is restricted. This subclause describes the interaction of the 
application client that requested the reservation, and the other application clients. 

Reservations are further controlled by the optional PERSISTENT RESERVE IN and PERSISTENT 
RESERVE OUT commands. For the requirements of this standard, reservations and releases made by 
use of the PERSISTENT RESERVE IN and PERSISTENT RESERVE OUT commands are the same as 
those using the RESERVE and RELEASE commands. See the ANSI NCITS 301 SPC standard for a 
description and the requirements of the various reservation commands. 

An application client uses reservations to gain a level of exclusivity in access to all or part of the medium 
for itself or another application client. It is expected that the reservation is retained until released. The 
device server ensures that the application client with the reservation is able to access the reserved 
media within the operating parameters established by that application client. 

The following paragraphs explain, on a command by command basis, the appropriate device server 
response when a reservation exists. Unless otherwise noted, the appropriate response to an application 
client that issues a command to a device server that is reserved to another initiator is RESERVATION 
CONFLICT status. 

If any initiator has an extent reservation on a logical unit, no other initiator may affect the operating 
definition of that initiator by use of the CHANGE DEFINITION command. If the device server allows 
different operating definitions for each initiator, then there is no conflict; otherwise, a reservation conflict 
occurs. 
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The COMPARE, COPY, and COPY AND VERIFY commands are evaluated for reservation conflict as if 
they were normal write and read operations even when a device server is requested to copy to or from 
itself. For example, if a COPY is issued to logical unit 0 that requests the device server to copy from 
logical unit 0 to logical unit 1, access to logical unit 1 is also to be evaluated for reservation conflicts. 

The FORMAT UNIT, PREVENT ALLOW MEDIUM REMOVAL (with a prevent bit of one), REZERO 
UNIT, and START STOP UNIT commands return a RESERVATION CONFLICT status if any other 
initiator has an extent reservation on the device server. 

The INQUIRY and REQUEST SENSE commands are not affected by any kind of reservation. 

The LOG SELECT, LOG SENSE, MODE SENSE, TEST UNIT READY, READ CAPACITY (pmi equal 
zero), READ BUFFER, WRITE BUFFER, and READ DEFECT DATA commands are not affected by 
extent reservations. 

The SEEK, LOCK UNLOCK CACHE, PRE-FETCH, and SYNCHRONIZE CACHE commands are 
evaluated for reservation conflict as if they were normal write or read operations. 

If an initiator has an extent reservation on a device server, and another initiator attempts a MODE 
SELECT command, a reservation conflict occurs if the command affects the manner of accessing the 
extent by the first initiator. If the command does not affect access to the extent, or parameters are 
saved for each initiator, then a reservation conflict does not occur. 

The SEND DIAGNOSTIC and RECEIVE DIAGNOSTIC RESULTS commands conflict with an extent 
reservation only if they affect access to the extent. 

The REASSIGN BLOCKS command shall not reassign a block that is in an extent reserved to another 
initiator. 

The SET LIMITS command generates a reservation conflict if the logical blocks specified are within an 
extent reserved to another initiator. 

All other commands that request read or write operations are evaluated for reservation conflict as 
described in the reserve commands. 

When a system is integrated with more than one application client, agreement is required between the 
application clients as to how media is reserved and released during operations, otherwise, an application 
client may be locked out of access to a logical unit in the middle of an operation. For example, an 
application client in initiator 'A' has a write operation in progress to a direct-access logical unit that has 
data stored in cache memory. Then, another application client in initiator 'B' issues a RESERVE 
command to the direct-access block device. As a result, the application client in initiator 'A' is locked out 
of issuing a SYNCHRONIZE CACHE command to ensure the integrity of the data. To prevent this from 
happening, an application client may issue a RESERVE command prior to the WRITE command. 


5.1.9 Seek(10) 

The SEEK(IO) command provides a way for the application client to position the actuator of the block 
device in preparation for access to a particular logical block at some later time. Since this positioning 
action is implicit in other commands, the SEEK(IO) command may not be useful with some direct-access 
block devices. 


5.1.10 Notched devices 

A notched (also known as zoned) device has areas of the medium with geometry changes. In the 
simplest case, the entire medium consists of a single notch. Multiple notches are often used to increase 
capacity of the device. On a disk, the inner tracks are physically shorter than the outer tracks. As a 
result, if each track is made to store the same number of data bits, the data is packed more densely on 
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the inner tracks than the outer tracks. By using notches, the outer tracks may contain a different number 
of sectors than the inner tracks, while balancing the data density. This results in increased capacity. 


The notch page is used to indicate the notch for assignment of values to the parameters in the format 
device page. By sequencing the notch page through each notch, the format device parameters of each 
notch are set. This may be done prior to initialization by the FORMAT UNIT command. 

5.1.11 Rotational position locking 

Rotational position locking is an optional feature implemented in some direct-access block devices to 
allow the synchronization of spindles between a number of logical units. The rotational position offset 
feature allows block devices to synchronize spindles at offsets from index. This may be useful in 
improving performance in systems that implement arrays of logical units. 


5.1.12 Relative addressing 

Relative addressing is a technique that may be useful in accessing structured data in a uniform manner. 
Relative addressing may be used when commands are linked. 

The SET LIMITS command (see 6.1.13) is provided to define the limits of a linked chain of relative 
addressing commands. This protects against exceeding the specified set of blocks. The SET LIMITS 
command has no effect on any other initiator. 


5.1.13 Error reporting 

If any of the following conditions occur during the execution of a command, the command shall be 
terminated with CHECK CONDITION status and the sense key shall be set to the appropriate sense key 
with the appropriate additional sense code for the condition. Some errors may occur after the completion 
status has already been reported. For such errors, ANSI NCITS 301 SPC defines a deferred error 
reporting mechanism. The following list illustrates some error conditions and the applicable sense keys. 
The list does not provide an exhaustive enumeration of all conditions that may cause the CHECK 
CONDITION status. 


Condition 

Sense key 

Invalid logical block address 

ILLEGAL REQUEST 

Unsupported option requested 

ILLEGAL REQUEST 

Logical unit reset or medium change since last command 
from this application client 

UNIT ATTENTION 

Self diagnostic failed 

HARDWARE ERROR j 

Unrecovered read error 

MEDIUM ERROR or HARDWARE ERROR 

Recovered read error 

RECOVERED ERROR 

Overrun or other error that might be resolved by 
repeating the command 

ABORTED COMMAND 

Attempt to write on write protected medium 

DATA PROTECT 


In the case of an invalid logical block address, the sense data information field shall be set to the logical 
block address of the first invalid address. 

In the case of an attempt to read a blank or previously unwritten block, the information field shall be set to 
the logical block address of the first blank block encountered. The data read up to that block shall be 
transferred (optical memory and write-once block devices only). 

In the case of an attempt to write a previously written block when blank checking is enabled, the 
information field shall be set to the logical block address of the first non-blank block encountered (optical 
memory and write-once block devices only). 
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5.1.14 Examples 

The following examples show some typical variations of the direct-access block device. Other variations 
are possible. 

5.1.14.1 Rotating media 

The typical application of a direct-access block device is a disk device. The medium is a disk coated 
with a material that allows flux changes to be induced. The disk device allows direct and random access 
to the medium. This is done with an actuator that positions the read-write head, and a rotating disk. Data 
is stored and retrieved through the interaction of the read-write head and the disk. 

The disk(s) may be divided into cylinders. Each cylinder may be divided into tracks. Each track may be 
divided into sectors. A cylinder is a set of tracks that can be accessed without movement of the actuator. 
A track is a recording path that the read-write head travels over during one rotation of the disk. A sector 
is a part of a track that contains the stored data blocks. 

A logical block is stored in one or more sectors, or a sector may store more than one logical block. A 
sector may be made up of a header, data, and a trailer. The header, if any, may contain a preamble 
used to synchronize read circuits to the data, an address field to identify the sector, flags to use for 
defect management, and a checksum that validates or corrects the header. The data field begins with a 
synchronizing field and a data area that contains user data. The trailer may contain checksum or error 
correction information. The checksum or the error correction information allows the correction of data for 
medium defects. 

A disk device is ready when the disks are rotating at the correct speed and the read-write circuitry is 
powered and ready to access the data. Some disks, particularly removable disks, require the user to 
issue load or start commands to bring the disk device to the ready state. 

A disk device may have to be formatted prior to the initial access. Exceptions to this are devices that are 
formatted at the factory and some optical devices with pre-formatted media. A disk device format may 
create headers for each sector and initialize the data field. The MODE SELECT command is often used 
prior to formatting to establish the geometry (number of heads and tracks, sectors per track, etc.) and 
defect management scheme. Disk devices are usually non-volatile. 

The defect management scheme of a disk device may not be discernible by the user through the 
interface, though some aspects can be evaluated and controlled by the application client. The device 
server may reserve some sectors and tracks for recording defect lists and for reassigning defective 
blocks. The READ LONG and WRITE LONG commands may access the user data and checksum 
portions of the data field so that defects may be induced by the application client to test the defect 
detection logic of the device server. WRITE LONG commands may also be used to emulate 
unrecoverable logical blocks when generating “mirror copies.” 

5.1.14.2 Sequential media 

Some tape logical units are implemented as a direct access block device so that they may be used in 
disk oriented operating system environments. These logical units are sometimes referred to as random 
access tape or floppy tape. These logical units might be thought of as a disk device with one or more 
long tracks. Access time to a logical block is usually longer than for a disk device, since the tape requires 
that it be fast forwarded or rewound to the block. As a result, the SEEK command often is more useful 
for a tape than for a disk. The only way an application client may determine if a direct-access block 
device is a tape is by using the medium type code returned by the MODE SENSE command. 


5.1.14.3 Memory media 

Memory media includes logical units that are traditionally used for primary storage within computer 
systems, such as solid state static or dynamic random access memories (e.g., SRAM, DRAM, or Flash). 
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These logical units may be non-mechanical, and therefore the entire physical medium may be accessed 
in virtually the same access time. The data may be accessed as a bit or byte and this also speeds 
access time. Memory block devices may store less data than disks or tapes, and are usually volatile 
(except Flash) when not protected by battery backup. 


5.1.15 Model for XOR commands 

In storage arrays, a storage array controller organizes a group of storage devices into objects. The type 
of object used by this model is the redundancy group. Some areas within the address space of the 
storage array are used for check data. The check data is generated by performing a cumulative 
exclusive-or (XOR) operation with the data from other areas within the address space of the storage 
array known as protected data. The XOR operation may be performed by the storage array controller or 
by the storage device. 

Performing the XOR operation in the storage device may result in a reduced number of data transfers 
across the interconnect. For example, when the XOR operation is done within the storage array controller 
four data transfer operations are needed for a typical update write sequence: a read transfer from the 
device containing protected data, a write transfer to the device containing protected data, a read transfer 
from the device containing check data, and a write transfer to the device containing check data. The 
storage array controller also does two internal XOR operations in this sequence. In contrast, during 
storage array controller supervised XOR operations (see 5.1.15.1) only three data transfer operations are 
needed: a write transfer to the device containing protected data; a read transfer from the device 
containing protected data; and a write transfer to the device containing check data. During third party 
XOR operations (see 5.1.15.2) only two data transfer operations are needed: a write transfer from the 
storage array controller to the device containing protected data and a write transfer from the device 
containing protected data to the device containing check data. 

Performing the XOR operation in the device eliminates the need for the storage array controller to 
perform any XOR operations. A storage array controller supervises three basic operations that require 
XOR functionality. These are the update write, regenerate, and rebuild operations. A command sequence 
for each of these operations is defined for the following operating modes. The command sequences use 
the device server to perform the XOR functions needed for the major operations. 


5.1.15.1 Storage array controller supervised XOR operations 

Three XOR commands are needed to implement storage array controller supervised XOR operations: 
XDWRITE, XPWRITE, and XDREAD. The storage array controller also uses READ and WRITE 
commands for certain operations. The XOR functionality may be used when all of the devices are in the 
same domain, when all devices are in separate domains, or any combination thereof, as long as the 
domains are accessible by the storage array controller. 


5.1.15.1.1 Update write operation 

The update write operation writes user data to a device containing protected user data and updates the 
parity information on the device containing check data. The sequence is: 

1) An XDWRITE command is sent to the device containing protected user data. This transfers the 
user write data to that device. The device reads the old user data, performs an XOR operation 
using the old user data and the received user data, retains the intermediate XOR result, and 
writes the received user data to the medium; 


2) An XDREAD command is sent to the device containing protected user data. This command 
transfers the intermediate XOR data from the XOR device to the storage array controller; 
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3) An XPWRITE command is sent to the device containing check data. This transfers the 

intermediate XOR data (received in the previous XDREAD command) to the device containing 
check data. The device reads the old XOR data, performs an XOR operation using the old XOR 
data and the intermediate XOR data, and writes the new XOR result to the medium. 


5.1.15.1.2 Regenerate operation 

The regenerate operation is used to recreate a data block that has an error. This is done by reading the 
associated data block from each of the other devices within the redundancy group and performing an 
XOR operation with each of these data blocks. The last XOR result is the data that should have been 
present on the unreadable device. The number of steps is dependent on the number of devices in the 
redundancy group, but the sequence is as follows: 


1) A READ command is sent to the first device. This transfers the data from the device to the 
storage array controller; 


2) An XDWRITE command with the disable write bit set is sent to the next device. This transfers the 
data from the previous read operation to the device. The device reads its data, performs an XOR 
operation on the received data and its data, and retains the intermediate XOR result; 


3) An XDREAD command is sent to the same device as in step 2. This transfers the intermediate 
XOR data from the device to the storage array controller; 


4) Steps 2 and 3 are repeated until all devices (except the failed device) in the redundancy group 
have been accessed. The intermediate XOR data returned by the last XDREAD command is the 
regenerated user data for the failed device. 


5.1.15.1.3 Rebuild operation 

The rebuild operation is similar to the regenerate operation, except that the last XOR result is written to 
the replacement device. This function is used when a failed device is replaced and the storage array 
controller is writing the rebuilt data to the replacement device. The sequence is as follows: 


1) A READ command is sent to the first device. This transfers the data from the device to the 
storage array controller; 


2) An XDWRITE command with the disable write bit equal one is sent to the next device. This 
transfers the data from the previous read operation to the device. The device reads its data, 
performs an XOR operation using the received data and its data, and retains the intermediate 
XOR result; 


3) An XDREAD command is sent to the same device as in step 2. This transfers the intermediate 
XOR data from the device to the storage array controller; 


4) Steps 2 and 3 are repeated until all devices (except the replacement device) in the redundancy 
group have been accessed. The intermediate XOR data returned by the last XDREAD command 
is the regenerated user data for the replacement device. 


5) A WRITE command is sent to the replacement device. This transfers the regenerated user data 
from step 4 to the replacement device. The replacement device writes the regenerated user data 
to the medium. 
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5.1.15.2 Third party XOR operations 

Five XOR commands are needed to implement the third party XOR operations: XDWRITE EXTENDED, 
XPWRITE, XDREAD, REGENERATE, and REBUILD. The storage array controller also uses READ and 
WRITE commands for certain operations. Third party XOR operations are restricted to systems where all 
devices involved in the operations are located in the same SCSI domain since direct interaction between 
those devices is required. 


5.1.15.2.1 Update write operation 

The update write operation is used to write user data to a device containing protected data and updates 
the parity information on a different device containing check data. 


1) An XDWRITE EXTENDED command is sent to the device containing protected data. This 
transfers the new write data to that device. The device reads its old user data, performs an XOR 
operation using the old user data and the received user data, temporarily stores the XOR result, 
and writes the received user data to the medium; 


2) The device containing protected data becomes a temporary initiator and sends an XPWRITE 
command to the device containing check data. This transfers the resulting XOR data from the 
device containing protected data to the device containing check data. The device containing 
check data reads its check data, performs an XOR operation using the check data and the 
received XOR data, and writes the resulting XOR result to the medium; 


3) After the device containing protected data receives status for its XPWRITE command, it returns 
ending status for the XDWRITE EXTENDED command to the storage array controller. This 
indicates that the operations on both the device containing protected data and the device 
containing check data have completed. 


5.1.15.2.2 Regenerate operation 

The regenerate operation is used to recreate a data block that is not readable from a data device. This is 
done by reading the associated data block from each of the other devices within the redundancy group 
and performing an XOR operation with each of these data blocks. The last XOR result is the regenerated 
data that had the error. The number of steps is dependent on the number of devices in the redundancy 
group, but the sequence is as follows (since XOR operands are commutable the XOR order is irrelevant, 
and the order of steps 2 and 3 is interchangeable): 


1) A REGENERATE command is sent to a valid device in the redundancy group (a valid device is 
any device in the group other than the failed device). This transfers the regenerate parameter list 
from the storage array controller to the device; 


2) The device reads the requested data from its own medium. The device retains the requested 
data for a subsequent XOR operation; 


3) The device becomes a temporary initiator and sends a READ command to another device 
included in the regenerate parameter list. That target device transfers the requested data to the 
temporary initiator. The temporary initiator performs an XOR operation between the read data 
from the previous step and the read data received in this step. The resulting XOR data is 
retained for the next step; 
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4) Step 3 is repeated until all devices listed in the regenerate parameter list have been accessed. 
The last XOR data result is retained by the temporary initiator. The temporary initiator returns 
completion status for the REGENERATE command to the storage array controller when this 
regenerated user data is available; 


5) An XDREAD command is sent from the storage array controller to the device that had been a 
temporary initiator in the above steps. This transfers the regenerated user data from the last 
XOR data result from the device to the storage array controller. 


5.1.15.2.3 Rebuild operation 

The rebuild operation is similar to the regenerate operation, except that the last XOR result is written to 
the replacement device. This is used when a failed device is replaced and rebuilt data is written to that 
replacement device. The sequence is as follows: 


1) A REBUILD command is sent to the replacement device in the redundancy group (the device 
that replaces a failed device). This transfers the rebuild parameter list from the storage array 
controller to the device; 


2) The device becomes a temporary initiator and sends a READ command to a device included in 
the rebuild parameter list. That target device transfers the requested data to the temporary 
initiator. The temporary initiator retains this data for a subsequent XOR operation; 


3) The temporary initiator sends a READ command to another device included in the rebuild 

parameter list. That device transfers the requested data to the temporary initiator. The temporary 
initiator performs an XOR operation between the read data from the previous step and the read 
data received in this step. The resulting XOR data is retained for the next step; 


4) Step 3 is repeated until all devices listed in the rebuild parameter list have been accessed. The 
last XOR data result is written to the replacement device’s medium, then the device returns 
completion status for the REBUILD command to the storage array controller. 


5.1.15.3 Hybrid subsystem XOR operations 

In a hybrid subsystem the redundancy group is divided between two or more domains (see 5.1.15.1) and 
at least one of those domains contains two or more of the devices in the redundancy group. Such a 
system could do its XOR operations as described in 5.1.15.1 (Storage array controller supervised XOR 
operations) but it may choose to use third party XOR commands for parts of the XOR operation where all 
the involved devices are in the same domain. This subclause describes use of the third party XOR 
operations on a hybrid system with two domains. For illustration the redundancy group has six devices, 
with three devices in each domain. 


5.1.15.3.1 Update write operation 

When the update write operation involves two devices that are in different domains, the storage array 
controller uses the technique described in storage array controller supervised XOR operations. When the 
update write operation involves two devices that are in the same domain the storage array controller may 
use either the storage array controller supervised operation or the third party XOR operation. 

5.1.15.3.2 Regenerate operation 

The regenerate operation, for the illustrated case, always involves five XOR devices (all but the failed 
device) where three devices are in one domain (referred to as domain A) and two devices are in the 
other domain (referred to as domain B). The sequence is as follows (since XOR operands are 
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commutable the XOR order is irrelevant, and the order of steps 2 and 3 is interchangeable; likewise, the 
order of steps 7 and 8 is interchangeable): 


1) A REGENERATE command is sent to a device in domain A. This transfers the regenerate 
parameter list (containing the other two valid devices and data extents) from the storage array 
controller to the device; 


2) The device reads the requested data from its own medium. The device retains the requested 
data for a future XOR operation; 


3) The device becomes a temporary initiator and sends a READ command to another device 
included in the regenerate parameter list. That device transfers the requested data to the 
temporary initiator. The temporary initiator performs an XOR operation between the read data 
from the previous step and the read data received in this step. The resulting XOR data is 
retained for the next step; 


4) Step 3 is repeated until all devices listed in the regenerate parameter list have been accessed. 
The last XOR data result is retained by the temporary initiator. The temporary initiator returns 
completion status for the REGENERATE command to the storage array controller when this 
partially regenerated user data is available; 


5) An XDREAD command is sent from the storage array controller to the temporary initiator device. 
This transfers the partially regenerated user data from the last XOR data result from the device 
to the storage array controller; 


6) A REGENERATE command with the intermediate data bit set is sent to a device in domain B. 
This transfers the regenerate parameter list (containing the other valid device and data extent) 
from the storage array controller to the device. The partially regenerated user data received in 
step 5 is sent as the intermediate data; 


7) The device reads the requested data from its own medium. The device performs an XOR 

operation between the intermediate data and its own data. The resulting XOR data is retained for 
the next step; 


8) The device becomes a temporary initiator and sends a READ command to the other device 
included in the regenerate parameter list. That target device transfers the requested data to the 
temporary initiator. The temporary initiator performs an XOR operation between the XOR data 
from step 7 and the read data received in this step. The last XOR data result is retained by the 
temporary initiator. The temporary initiator returns completion status for the REGENERATE 
command to the storage array controller when this regenerated user data is available; 


9) An XDREAD command is sent from the storage array controller to the device that had been a 
temporary initiator device in the above steps. This transfers the regenerated user data from the 
last XOR data result from the device to the storage array controller. 


5.1.15.3.3 Rebuild operation 

The rebuild operation, for this illustration, involves five valid devices and the replacement device where 
three valid devices are in one domain (referred to as domain A) and two valid devices and the 
replacement device are in the other domain (referred to as domain B). The sequence is as follows (since 
XOR operands are commutable the XOR order is irrelevant, and the order of steps 2 and 3 is 
interchangeable): 
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1) A REGENERATE command is sent to a device in domain A. This transfers the regenerate 
parameter list (containing the other two valid devices and data extents) from the storage array 
controller to the device; 


2) The device reads the requested data from its own medium. The device retains this data for a 
future XOR operation; 


3) The device becomes a temporary initiator and sends a READ command to another device 
included in the regenerate parameter list. That device transfers the requested data to the 
temporary initiator. The temporary initiator performs an XOR operation between the read data 
from the previous step and the read data received in this step. The resulting XOR data is 
retained for the next step; 


4) Step 3 is repeated until all devices listed in the regenerate parameter list have been accessed. 
The last XOR data result is retained by the temporary initiator. The temporary initiator returns 
completion status for the REGENERATE command to the storage array controller when the data 
is available; 


5) An XDREAD command is sent from the storage array controller to the temporary initiator device. 
This transfers the partially regenerated data from the device to the storage array controller; 


6) A REBUILD command with the intermediate data bit set is sent to the replacement device in 
domain B. This transfers the rebuild parameter list (containing the two valid devices and data 
extents) from the storage array controller to the device. The partially rebuilt data received in 
step 5 is sent as the intermediate data; 


7) The device becomes a temporary initiator and sends a READ command to a device included in 
the rebuild parameter list. That target device transfers the requested data to the temporary 
initiator. The temporary initiator performs an XOR operation between the intermediate data and 
the read data received in this step. The resulting XOR data is retained for the next step; 


8) The temporary initiator sends a READ command to the other device included in the rebuild 

parameter list. That device transfers the requested data to the temporary initiator. The temporary 
initiator performs an XOR operation between the read data from the previous step and the read 
data received in this step; 


9) The last XOR data result is written to the replacement device’s medium, then the device returns 
completion status for the REBUILD command to the storage array controller. 


5.1.15.4 Additional array subsystem considerations 

This clause lists considerations that apply to any array subsystem, but describes how use of the XOR 
commands may affect handling of those situations. 


5.1.15.4.1 Buffer full status handling 

When the storage array controller sends an XDWRITE or REGENERATE command to a device, the 
device has an obligation to retain the resulting XOR data until the storage array controller issues a 
matching XDREAD command to retrieve the data. This locks up part or all (depending on the size of the 
device’s buffer and the size of the XOR data block) of the device’s buffer space. When all of the device’s 
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buffer is allocated for XOR data, it may not be able to accept new media access commands other than 
valid XDREAD commands and it may not be able to begin execution of commands that are already in 
the task set. 


When the device is not able to accept a new command because there is not enough space in the buffer, 
the device shall terminate that command with a CHECK CONDITION status and the sense key shall be 
set to ILLEGAL REQUEST with the BUFFER FULL additional sense code. 

When a storage array controller receives this status, it may issue any matching XDREAD commands 
needed to satisfy any previous XDWRITE or REGENERATE commands. This results in buffer space 
being freed for other commands. If it is a multi-initiator system and the storage array controller has no 
XDREAD commands to send, the storage array controller may assume the buffer space has been 
allocated to another initiator. The storage array controller may retry the command in the same manner 
that a command ending with TASK SET FULL status would be retried including not retrying the 
command too frequently. 

The storage array controller may use command linking to avoid a buffer full condition. For example, a 
storage array controller supervised update write operation would consist of an XDWRITE command 
linked to an XDREAD command. 


5.1.15.4.2 Access to an inconsistent stripe 

A stripe is a set of corresponding strips of consecutively addressed storage from two or more block 
devices. A strip is an equal division of the storage capacity in a set of consecutively addressed LBAs on 
a single block device. When the storage array controller issues an update write to a device, the data in 
the device has been updated when successful status is returned for the command. Until the device 
containing check data has been updated, however, the associated stripe in the redundancy group is not 
consistent (e.g., performing an XOR operation on the protected data does not produce the check data). 
The storage array controller shall keep track of this window of inconsistency and make sure that a 
regenerate or rebuild operation for any data extent within the stripe is not attempted until after the device 
containing check data has been updated (making the stripe consistent again). For multi-initiator systems, 
tracking the updates may be more complex because each storage array controller needs to ensure that 
a second storage array controller is not writing to a stripe that the first storage array controller is 
regenerating or rebuilding. The coordination between storage array controllers is system specific and is 
beyond the scope of this standard. The following list identifies cases where a storage array controller 
needs to prevent data corruption due to a temporarily inconsistent stripe: 


a) When an XDWRITE command has been issued and completed, the device containing protected 
data has been updated but the device containing check data has not. The stripe is inconsistent 
until the XPWRITE command to the device containing check data returns completion status; 


b) When an XDWRITE EXTENDED command has been issued, the device containing protected 
data and the device containing check data are updated at different times during the course of the 
command. The stripe should be treated as inconsistent between the time the storage array 
controller issues the XDWRITE EXTENDED command and the completion status for the 
command is received; 


c) Any time a regenerate or rebuild operation is in progress for a given stripe, update writes to that 
stripe should be avoided. 


5.1.15.4.3 Error handling considerations 

If any of the XOR commands end with CHECK CONDITION status and an unrecovered error is 
indicated, an inconsistent stripe may result. It is the storage array controller’s responsibility to identify 
the failing device and the extent of the failure, then limit access to the inconsistent stripe. In the case of 
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third party XOR operations the failing device may be a device containing protected data or a device 
containing check data. The storage array controller may identify the failing device from the resulting 
sense data, or it may access the devices directly to determine the condition of the affected devices. The 
recovery procedures that the storage array controller implements are not addressed by this standard. 

5.1.15.4.3.1 Errors during third party XOR operations 

Third party operations involve the processing of several commands exchanged among three or more 
devices. For the purposes of this clause, a command that causes the recipient of that command to 
generate one or more other commands to another device (or devices) is referred to as a primary 
command and the recipient of a primary command is referred to as a primary target. All commands 
generated by a primary target (based on the receipt of a primary command) are referred to as secondary 
commands and are sent to a secondary target or secondary targets. The definitions of primary 
command, primary target, secondary command, and secondary target are temporary, for this clause 
only, and should not be associated with the more general "SCSI Primary Command" or "SCSI Target" 
usage. 


The primary target of an XDWRITE EXTENDED primary command generates an XPWRITE secondary 
command; the primary target of a REBUILD primary command generates one or more READ secondary 
commands. The primary command shall not be completed until the primary target is prepared to report 
the completion status or implied completion status of the secondary commands. Two classes of 
exception conditions may occur during these commands. One class consists of those resulting directly 
from the primary command. The other class consists of those resulting from a secondary command. 
Either or both of these classes of exception may occur during a third party operation. 


5.1.15.4.3.1.1 Primary errors - errors resulting directly from the primary command 

The first class of errors consists of exception conditions that are detected by the device that received the 
primary command (primary target) and are not due to the failure of a resulting secondary command. 
These conditions include, but are not limited to, invalid parameters in the primary command, inability of 
the primary target to continue operating, and parity errors while transferring the primary command, data, 
or status byte. In the event of such an exception condition, the primary target shall: 

1) Terminate the primary command with CHECK CONDITION status; 


2) Build sense data according to the exception condition. 


5.1.15.4.3.1.2 Secondary errors - errors resulting from the secondary command 

The second class of errors consists of exception conditions resulting from the failure of a secondary 
command. The sense data for such errors shall be passed to the initiator of the primary command in the 
additional sense bytes field of the sense data. 

If the primary target detects the exception (i.e., by some means other than receiving CHECK 
CONDITION status from the secondary target) it shall: 

1) terminate the primary command with CHECK CONDITION status; 


2) set the sense key to ABORTED COMMAND if there are no primary errors to report. Otherwise, 
the sense key shall be set according to the primary error; 


3) set the first byte of the command specific information field of the sense data to the starting byte 
number, relative to the first byte of sense data, of an area that contains the primary target’s 
sense data for the secondary error. A zero value in this byte indicates no secondary error has 
been detected by the primary target. The secondary sense data shall be built in the standard 
sense data format as defined for the REQUEST SENSE command; 
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4) in the case of a REBUILD or REGENERATE primary command, set the third byte of the 
command specific information field of the sense data to an index value indicating the target 
identifier of the failing secondary target. This value shall be an index into the source descriptor 
entries of the parameter data of the primary command, and shall point to the entry containing the 
target identifier of the failing device; 0 points to the first entry, 1 points to the second entry, etc. 
This byte shall be ignored if the primary command is not a REBUILD or REGENERATE. 

If the secondary target detects the exception, the primary target receives CHECK CONDITION status 
from the secondary target. The primary target shall recover the sense data associated with the exception 
condition, clear any exception conditions associated with the CHECK CONDITION status, and shall: 

1) terminate the primary command with CHECK CONDITION status; 


2) set the sense key to ABORTED COMMAND if there are no primary errors to report. Otherwise, 
the sense key shall be set according to the primary error; 


3) set the second byte of the command specific information field of the sense data to the starting 
byte number, relative to the first byte of sense data, of an area that contains (unchanged) the 
secondary target’s status byte followed by its sense data. A zero value in this byte indicates no 
secondary error has been reported by the secondary target; 


4) in the case of a REBUILD or REGENERATE (primary) command, set the third byte of the 
command specific information field of the sense data to an index value indicating the target 
identifier of the failing secondary target. This value shall be an index into the source descriptor 
entries of the parameter data of the primary command, and shall point to the entry containing the 
target identifier of the failing device; 0 points to the first entry, 1 points to the second entry, etc. 
This byte is invalid and shall be ignored if the primary command is not a REBUILD or 
REGENERATE. 

For a given primary command, if errors are generated by more than one secondary command, the sense 
data shall contain error information for the secondary error first obtained by the primary target. 

Since, for secondary errors, the sense key is set to ABORTED COMMAND only if there are no primary 
errors to report (see item 2 above), the first and second bytes of the command specific information field 
should be checked, even when the sense key is a value other than ABORTED COMMAND, to determine 
if any secondary errors have occurred. 

Note 2 - All three of the above error types might occur during the same third party operation. If this 
happens, there are three unique pieces of error information contained in the sense data: one for the 
primary error (starting at byte 0), and two for the secondary errors (in the additional sense bytes). 

5.1.15.4.4 XOR data retention requirements 

The target shall retain XOR data while awaiting retrieval by an XDREAD command until performing one 
of the following events: a matching XDREAD command, TARGET RESET, power cycle, CLEAR TASK 
SET, ABORT TASK if the task matches the pending XDREAD, ABORT TASK SET. 

5.2 Model for optical memory block devices 

An optical memory block device is a logical unit that can potentially support a variety of optical media, 
(e.g., read-only, write-once, erasable, or reversible). In several respects, an optical memory block 
device is similar to a direct-access block device. However, optical memory block devices may offer 
features that are not available with other logical units, including large capacity removable media. 

These logical units often require the functions that are not found in direct-access block devices such as 
logical block update, pre-erasure before writing, or scanning for blank medium and twelve-byte command 
descriptor blocks. This standard includes specific device types for write-once and CD-ROM block devices 
that also use optical media, but are not capable of supporting several types of optical media. A logical 
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unit that uses write-once media can be an optical memory block device. Logical units that use read-only 
media can be optical memory block devices; however, logical units using CD-ROM media have certain 
unique characteristics and should not be implemented as optical memory block devices. 

A model of optical memory block devices is complicated by the nature of one of its potential advantages, 
that it can support media that has different characteristics. There are three types of optical media in 
general use, read-only, write-once, and reversible. Read-only media are used for publishing 
applications requiring dissemination of large amounts of data, since the data may be replicated on a disk 
at low cost. Write-once media are used in applications that have large backup or archiving 
requirements. It is also used in applications that need large amounts of on-line reference information. 
Reversible media is used in applications that need large amounts of temporary storage (e.g., a graphics 
workstation), and can take advantage of removable media. In some applications, reversible media 
devices are used in place of direct-access block devices. 

Reversible media usually need to be reversed (erased, blanked) before new data can be written. In such 
cases an erase operation is required before data can be written. Some optical memory block devices 
perform this erase operation implicit with each write operation that impacts the data throughput. Some 
block devices can perform the erase separately. The ERASE command may be used to erase areas of 
the medium with a corresponding increase in data throughput on subsequent write operations. Products 
using optical media should not be implemented as direct-access block devices, due to the overhead 
penalty on performance from the emulation and the lack of support in direct-access block devices to take 
advantage of the features specifically available with optical memory block devices. 

The type of medium supported by the block device and the type of medium currently loaded may be 
determined by examining the MODE SENSE data. One unique feature of optical memory block devices 
is support of media with mixed types (e.g., media with read-only and write-once areas). The INQUIRY 
command informs the application client that the logical unit is an optical memory block device; the 
application client should then determine the medium type from the MODE SENSE data. The application 
client needs to be cognizant of the medium type since the logical unit's characteristics may change when 
the media are changed. 

Write-once media can have valid data written to a logical block once. This is an important feature where 
audit trails and permanent archives are needed. Optical memory block devices supporting write-once 
media may have the ability to update a logical block, preserving the previous generation of data. These 
logical units may provide a means to recover the previous data through use of commands that allow read 
access to the different generations of data that are stored at the same logical block address. 

An important requirement in dealing with optical media is determining if logical blocks contain written 
data and or if they are blank. A blank logical block is one that is properly initialized so that data 
subsequently written to it can be recovered. The logical blocks may have a flag associated with each 
that indicates whether they have been written or not. 

Strategies used to manage write once and erasable media may depend on being able to determine the 
boundary between written and blank areas of the medium. The MEDIUM SCAN command is useful in 
finding blank areas for subsequent write operations. 


5.2.1 Defect management 

Defect management may be performed on logical blocks by updating in a manner similar to that used by 
direct-access block devices with the REASSIGN BLOCKS command. The advantage of using the 
updating (that is not supported by direct-access block devices) is access to the previous data. 

The update operation assigns an alternate physical block to the logical block while simultaneously writing 
the data to the block. Commands are provided to allow the recovery of previous generations of updated 
blocks. 
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Defect management on optical-memory block devices may be vendor-specific. However there are 
standards for some types of optical-memory media that specify defect management techniques. These 
standards may supersede the requirements pertaining to error and defect reporting in this standard. 


5.2.2 Error reporting 

If any of the following conditions occur during the execution of a command the device server shall return 
CHECK CONDITION status and the appropriate sense key shall be set with the appropriate additional 
sense code for the condition. The following list illustrates some error conditions and the applicable sense 
keys. The list does not provide an exhaustive enumeration of all conditions that may cause the CHECK 
CONDITION status. 


Condition 

Sense key 

Invalid logical block address 

ILLEGAL REQUEST 

Unsupported option requested 

ILLEGAL REQUEST 

Logical unit reset or medium change since last command 
from this application client 

UNIT ATTENTION 

Self diagnostic failed 

HARDWARE ERROR 

Unrecovered read error 

MEDIUM ERROR or HARDWARE ERROR 

Recovered read error 

RECOVERED ERROR 

Overrun or other error that might be resolved by 
repeating the command 

ABORTED COMMAND 

Attempt to write on write protected medium 

DATA PROTECT 

Attempt to read a blank or previously unwritten block 

BLANK CHECK 

Attempt to write a previously written block and blank 
checking is enabled 

BLANK CHECK 

Attempt to write on read-only medium 

DATA PROTECT 


In the case of an invalid logical block address, the sense data information field shall be set to the logical 
block address of the first invalid address. 

In the case of an attempt to read a blank or previously unwritten block, the sense data information field 
shall be set to the logical block address of the first blank block encountered. The data read up to that 
block shall be transferred. 

In the case of an attempt to write a previously written block when blank checking is enabled, the sense 
information field shall be set to the logical block address of the first non-blank block encountered. 

5.3 Model for write-once block devices 

The model for the write-once block device is a variation on the optical memory model. Most of the 
aspects of a write-once block device are similar to optical memory block devices. The differences are 
summarized in this subclause. 

5.3.1 Logical blocks 

Data may be written to a logical block only once. A subsequent write to a logical block already written 
may or may not be corrupted, depending on the implementation. Write-once physical media is non¬ 
volatile. 

SCSI write-once block devices are intended to be archival in nature. Data at a logical block address is 
not expected to change once it is written. The update commands are not recommended for this device 
type. Logical units that require the update function should use the optical memory device type. 

Block devices may be able to determine the state of a logical block prior to access. These block devices 
can determine whether a block is blank or written. This is useful in detecting previously written blocks, 
and preventing a destructive overwrite. This is also useful in finding blank areas for later writing. The 
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MEDIUM SCAN command may be used to find blank and written areas prior to WRITE and READ 
commands. 


5.3.2 Initialization 

The FORMAT UNIT command is not used by write-once block devices. Write-once media is shipped 
pre-formatted by the manufacturer and is ready for use when mounted. 

5.3.3 Physical medium defects 

The raw defect rate may be higher for optical medium than for magnetic medium. Data may or may not 
be recovered through the use of sophisticated error correction algorithms. The level of error correction 
used for data recovery may be selectable. However, write-once block devices may have a minimum 
level that is always used and is not changeable through the error recovery mode parameter. Control of 
the error correction algorithms and level of correction is vendor-specific. 

Defect management on write-once block devices may be vendor-specific. However, there are standards 
for some types of write-once media that specify defect management techniques. These standards, may 
supersede the implementation requirements pertaining to error and defect reporting in this standard. 


5.3.4 Error reporting 

If any of the following conditions occur during the execution of a command the device server shall return 
CHECK CONDITION status and the appropriate sense key shall be set with the additional sense code for 
the condition. The following list illustrates some error conditions and the applicable sense keys. The list 
does not provide an exhaustive enumeration of all conditions that may cause the CHECK CONDITION 
status. 


Condition 

Sense key 

Invalid logical block address 

ILLEGAL REQUEST 

Unsupported option requested 

ILLEGAL REQUEST 

Logical unit reset or medium change since last command 
from this application client 

UNIT ATTENTION 

Self diagnostic failed 

HARDWARE ERROR 

Unrecovered read error 

MEDIUM ERROR or HARDWARE ERROR 

Recovered read error 

RECOVERED ERROR 

Overrun or other error that might be resolved by 
repeating the command 

ABORTED COMMAND 

Attempt to write on write protected medium 

DATA PROTECT 

Attempt to read a blank or previously unwritten block 

BLANK CHECK 

Attempt to write a previously written block and blank 
checking is enabled 

BLANK CHECK 


In the case of an invalid logical block address, the sense data information field shall be set to the logical 
block address of the first invalid address. 

In the case of an attempt to read a blank or previously unwritten block, the sense data information field 
shall be set to the logical block address of the first blank block encountered. The data read up to that 
block shall be transferred. 

In the case of an attempt to write a previously written block and blank checking is enabled, the sense 
information field shall be set to the logical block address of the first non-blank block encountered. 
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6 Commands for block devices 


6.1 Commands for direct-access block devices 

The commands for direct-access block devices shall be as shown in Table 1. 

Table 1 - Commands for direct-access block devices 



(continued) 
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6.1.1 FORMAT UNIT command 

The FORMAT UNIT command (see Table 2) formats the medium into application client addressable 
logical blocks per the application client defined options. In addition, the medium may be certified and 
control structures may be created for the management of the medium and defects. The degree that the 
medium is altered by this command is vendor-specific. 


Table 2 - FORMAT UNIT command 



The simplest mandatory form of the FORMAT UNIT command (with no format data) accomplishes 
medium formatting with little application client control over defect management. The device server 
implementation determines the degree of defect management that is to be performed. Two additional 
mandatory forms of this command increase the application client's control over defect management. 
Several optional forms of this command further increase the application client's control over defect 
management, by allowing the application client to specify: defect list(s) to be used; defect locations (in 
several formats); that logical unit certification be enabled; and exception handling in the event that defect 
lists are not accessible. 
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If the logical unit is reserved, a reservation conflict shall occur when a FORMAT UNIT command is 
interpreted from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation, or any extent reservation, from any application client, is active for the specified logical unit. 

During the format operation, the device server shall respond to commands as follows: 

a) In response to all commands except REQUEST SENSE and INQUIRY, the device server shall 
return CHECK CONDITION status unless a reservation conflict exists, in that case 
RESERVATION CONFLICT status shall be returned; 

b) In response to the INQUIRY command, the device server shall respond as commanded; 

c) In response to the REQUEST SENSE command, unless an error has occurred, the device server 
shall return a sense key of NOT READY and an additional sense code of LOGICAL UNIT NOT 
READY FORMAT IN PROGRESS, with the sense key specific bytes set for progress indication 
(as described in the ANSI NCITS 301 SPC standard). Refer to ANSI NCITS 301 SPC for a 
description of deferred error handling that may occur during the format operation. 

Note 3 - The MODE SELECT parameters (if any) should be set prior to issuing the FORMAT 
UNIT command. 

During the execution of the FORMAT UNIT command, the device server may perform a medium defect 
management algorithm (that may be controlled by the application client, using optional forms of this 
command). Four sources of defect location information (hereafter called defects) are defined as follows: 

a) Primary defect list (plist). This is the list of defects, that may be supplied by the original 
manufacturer of the device or medium, that are considered permanent defects. The plist is 
located outside of the application client-accessible logical block space. The plist is accessible by 
the device server (to reference while formatting), but it is not accessible by the application client 
except through the READ DEFECT DATA command. Once created, the original plist shall not be 
subject to change; 

b) Logical unit certification list (clist). This list includes defects detected by the device server during 
an optional certification process executed during the FORMAT UNIT command. This list shall be 
added to the glist; 

c) Data defect list (dust). This list of defect descriptors may be supplied to the device server by the 
application client in the data-out buffer transfer of the FORMAT UNIT command. This list shall 
be added to the glist. The defect list length in the defect list header may be zero, in that case 
there is no dust; 

d) Grown defect list (glist). The glist includes all defects sent by the application client or detected 
by the device server. The glist does not include the plist. If the cmplst bit is zero, the glist shall 
include dusts provided to the device server during the previous and the current FORMAT UNIT 
commands. The glist shall also include: 

a) defects detected by the format operation during medium certification; 

b) defects previously identified with a REASSIGN BLOCKS command; 

c) defects previously detected by the device server and automatically reallocated. 

A format data (fmtdata) bit of zero indicates that data-out buffer shall not be transferred. The source of 
defect information is not specified. 

A fmtdata bit of one indicates that the FORMAT UNIT parameter list (see 

Table 3) shall be in the data-out buffer transfer. The data-out buffer transfer consists of a defect list 
header (see Table 4), followed by an initialization pattern descriptor, followed by zero or more defect 
descriptors. Each defect descriptor identifies a location on the medium that the device server shall map 
out of the user-accessible area. 
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Table 3 - FORMAT UNIT parameter list 


HH 

7 6 5 4 3 2 1 0 


DEFECT LIST HEADER 


INITIALIZATION PATTERN DESCRIPTOR (if any) 


defect descriptor(s) (if any) 

0 

DEFECT DESCRIPTOR 0 

n 

(See specific table for length.) 



0 

DEFECT DESCRIPTOR X 

n 

(See specific table for length.) 


The defect list header (see Table 4) provides several optional format control bits. Device servers that 
implement these bits provide the application client additional control over the use of the four defect 
sources, and the formatting operation. If the application client attempts to select any function not 
implemented by the device server, the device server shall terminate the command with CHECK 
CONDITION status and the sense key shall be set to ILLEGAL REQUEST with the additional sense code 
set to INVALID FIELD IN PARAMETER LIST. 


Table 4 - defect list header 


|§g 





























■Si 

taamm 
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A complete list (cmplst) bit of zero indicates that the defect list sent by the application client is an addition 
to the existing list of defects. As a result a new gust is constructed that contains the existing glist, the 
dust (if it is sent by the application client), and the clist (if certification is enabled). The device server 
may add any defects it detects during the format operation to this dust. 

A cmplst bit of one indicates that the defect list sent by the application client is a complete list of defects. 
Any existing defect list except the plist shall be ignored by the device server. As a result, a new glist is 
constructed that contains the dust (if it is sent by the application client), and the clist (if certification is 
enabled). The device server may add any defects it detects during the format operation to this dust. 
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Table 5 defines the defect descriptor requirements for the FORMAT UNIT command. 


Table 5 - FORMAT UNIT defect descriptor format and requirements 




Defect 

Defect 





list 

list 



FMTDATA 

CMPLST 

format 

lenath 

Type 

Comments 

! o 

0 

000b 

N/A 

M 

Vendor-specific defect information 

BLOCK FORMAT || 

1 

0 

000b 

Zero 

M 

See notes (1) and (3) 

1 

1 

000b 

Zero 

M 

See notes (1) and (4) 

1 

0 

000b 

>0 

O 

See notes (2) and (3) 

! i 

1 

000b 

>0 

O 

See notes (2) and (4) 

BYTES FROM INDEX FORMAT || 

1 

0 

100b 

Zero 

O 

See notes (1) and (3) 

1 

1 

100b 

Zero 

O 

See notes (1) and (4) 

1 

0 

100b 

>0 

O 

See notes (2) and (3) 

! i 

1 

100b 

>0 

O 

See notes (2) and (4) 

PHYSICAL SECTOR FORMAT || 

1 

0 

101b 

Zero 

000b 

See notes (1) and (3) 

1 

1 

101b 

Zero 

000b 

See notes (1) and (4) 

1 

0 

101b 

>0 

000b 

See notes (2) and (3) 

! i 

1 

101b 

>0 

000b 

See notes (2) and (4) 

VENDOR-SPECIFIC FORMAT || 

1 

0 

110b 




1 

1 

110b 




All remaining codes are reserved. || 

Key: M = Command implementation is mandatory. 


! 0 = Command implementation is optional. 


Notes: 






1 No dust is transferred to the device server during the data-out buffer transfer. 

2 A dust is transferred to the device server during the data-out buffer transfer. 

Add the dust defects to the new gust. 



3 Use the existing gust as a defect source. Add existing gust defects to the new gust. 

4 Discard the existing gust. Do not add existing gust defects to the new gust. 

5 All the options described in this table cause a new gust to be created during execution 

of the FORMAT UNIT command as described in the text. 

1 


The defect list format field specifies the defect descriptor to be used if the fmtdata bit is one (see Table 
5). 

The interleave field specifies the interleave that is used when performing the format operation. This 
allows the logical blocks to be related in a way that may facilitate matching the transfer rate between the 
application client and the peripheral. An interleave of zero specifies that the device server use its default 
interleave. An interleave of one specifies that consecutive logical blocks be placed in contiguous 
ascending order. All other values are vendor-specific. 

A format options valid (fov) bit of zero indicates that the device server shall use its default settings for 
the dpry, dcrt, stpf, ip and dsp bits (see below). If fov is zero, the application client shall set these bits to 
zero. If fov is zero and any of the other bits in this paragraph are not zero, the device server shall 
terminate the command with CHECK CONDITION status and the sense key shall be set to ILLEGAL 
REQUEST with the additional sense code set to INVALID FIELD IN PARAMETER LIST. 

A fov bit of one indicates that the device server shall examine the setting of the dpry, dcrt, stpf, ip and 
dsp bits. When the fov bit is one, the dpry, dcrt, stpf, ip, and dsp bits are defined as follows. 
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A disable primary (dpry) bit of zero indicates that the device server shall not use portions of the medium 
identified as defective in the primary defect plist for application client addressable logical blocks. If the 
device server is not able to locate the plist or it is not able to determine whether a plist exists, it shall 
perform the action specified by the stpf bit. A dpry bit of one indicates that the device server shall not 
use the plist to identify defective areas of the medium. The plist is not deleted. 

A disable certification (dcrt) bit of zero indicates that the device server shall perform a vendor-specific 
medium certification operation to generate a clist. A dcrt bit of one indicates that the device server 
shall not perform any vendor-specific medium certification process or format verification operation while 
executing the FORMAT UNIT command. 

The stop format (stpf) bit controls the behavior of the device server when one of the following events 
occurs: 

a) The device server has been requested to use the primary defect list (dpry is zero), or the grown 
defect list (cmplst is zero) and the device server is not able to locate the list nor determine 
whether the list exists; 

b) The device server has been requested to use the primary defect list (dpry is zero) or the grown 
defect list (cmplst is zero), and the device server encounters an error while accessing the defect 


A stpf bit of zero indicates that, if one or both of the above conditions occurs, the device server shall 
continue to execute the FORMAT UNIT command. The device server shall return CHECK CONDITION 
status at the completion of the FORMAT UNIT command and the sense key shall be set to 
RECOVERED ERROR with the additional sense code set to either DEFECT LIST NOT FOUND if the 
first condition occurred, or DEFECT LIST ERROR if the second condition occurred. 

A stpf bit of one indicates that, if one or both of the above conditions occurs, the device server shall 
terminate the FORMAT UNIT command with CHECK CONDITION status and the sense key shall be set 
to MEDIUM ERROR with the additional sense code set to either DEFECT LIST NOT FOUND if the first 
condition occurred, or DEFECT LIST ERROR if the second condition occurred. 

Note 4 - The use of the fmtdata bit, the cmplst bit, and the defect header allow the application 
client to control the source of the defect lists used by the FORMAT UNIT command. Setting the 
defect list length to zero allows the application client to control the use of plist and clist without 
having to specify a dust. 

An initialization pattern (ip) bit of zero indicates that an initialization pattern descriptor is not included and 
that the device server shall use its default initialization pattern. An ip bit of one indicates that an 
initialization pattern descriptor (see 6.1.1.2) is included in the FORMAT UNIT parameter list immediately 
following the defect list header. 

A disable saving parameters (dsp) bit of zero specifies that the device server shall save all the MODE 
SELECT savable parameters for all application clients to non-volatile memory during the format 
operation. A dsp bit of one specifies that the device server shall not save the MODE SELECT savable 
parameters to non-volatile memory during the format operation. Pages that are not reported as savable 
are not affected by the dsp bit. 

An immediate (immed) bit of zero indicates that status shall be returned after the format operation has 
completed. An immed bit value of one indicates that the device server shall return status as soon as the 
command descriptor block has been validated, and the entire defect list has been transferred. 

The bit designated VS is vendor-specific. 

The defect list length field in the defect list header specifies the total length in bytes of the defect 
descriptors that follow and does not include the initialization pattern descriptor or initialization pattern, if 
any. The length of the defect descriptors varies with the format of the defect list. The three formats for 
the defect descriptor(s) field in the defect lists are shown in 6.1.1.1. 
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6.1.1.1 Defect list formats 

This subclause describes the defect list formats used in the FORMAT UNIT, READ DEFECT DATA and 
translate page of the SEND DIAGNOSTIC and RECEIVE DIAGNOSTIC RESULTS commands. 

Note 5 - The selected reporting format accounts for variables that impact the information in the 
returned data. For example, the specific location of a defect, while constant in angular and radial 
location on the block device, may change in reported location if a format operation with different 
geometry parameters is performed. It is the responsibility of the application client to use a defect 
list format appropriate for the intended operation with the current or future geometry parameters. 

If the device server is able to detect that the selected defect list format would provide inconsistent 
results, the device server may return CHECK CONDITION status. 


Each block format defect descriptor (see Table 6) specifies a four-byte defective block address that 
contains the defect. Use of the Block format is vendor-specific. 


Table 6 - defect descriptor - Block format 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 







3 



DEFECTIVE BLOCK ADDRESS 


(LSB) 


The defect list length is equal to four times the number of defect descriptors. 

The defect descriptors should be in ascending order. More than one physical or logical block may be 
affected by each defect descriptor. A device server may return CHECK CONDITION if the defect 
descriptors are not in ascending order. 

Each byte from index defect descriptor (see Table 7) specifies the location of a defect that is no more 
than eight bytes long. 


Table 7 - defect descriptor - Bytes from index format 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

(MSB) 

2 

CYLINDER NUMBER OF DEFECT (LSB) 

3 

HEAD NUMBER OF DEFECT 

4 

(MSB) 

7 

DEFECT BYTES FROM INDEX (LSB) 


The defect list length is equal to eight times the number of defect descriptors. 

Each descriptor comprises the cylinder number of the defect, the head number of the defect, and the 
defect bytes from index to the defect. The defect descriptors shall be in ascending order. The cylinder 
number of the defect is the most significant part of the address and the defect bytes from index is the 
least 

significant part of the address. More than one logical block may be affected by each defect. If the 
defect bytes from index has a value of FFFFFFFFh, this indicates that the entire track shall be 
considered defective. 
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Each physical sector defect descriptor (see Table 8) specifies the location of a defect that is the length of 
a sector. 


Table 8 - defect descriptor - Physical sector format 


EH 

7 6 5 4 3 2 1 0 

0 

(MSB) 

2 

CYLINDER NUMBER OF DEFECT (LSB) 

3 

HEAD NUMBER OF DEFECT 

4 

(MSB) 

7 

DEFECT SECTOR NUMBER (LSB) 


The defect list length is equal to eight times the number of defect descriptors. 

Each descriptor comprises a cylinder number of the defect, the head number of the defect, and the 
defect’s sector number. The defect descriptors shall be in ascending order. The cylinder number of the 
defect is the most significant part of the address and the defect’s sector number is the least significant 
part of the address. More than one logical block may be affected by each defect descriptor. A defect’s 
sector number of FFFFFFFFh indicates that the entire track shall be considered defective. 

6.1.1.2 Initialization pattern option 

The initialization pattern option specifies that the logical blocks contain the specified initialization pattern. 
The initialization pattern descriptor (see Table 9) is sent to the device server as part of the FORMAT 
UNIT parameter list. 

Table 9 - initialization pattern descriptor 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

IP MODIFIER 

SI 

Reserved | 

1 

PATTERN TYPE j| 

2 

(MSB) 








3 




INITIALIZATION PATTERN LENGTH 

(LSB) 


4 









n 




INITIALIZATION PATTERN 





The ip modifier field specifies the type and location of a header that modifies the initialization pattern (see 
Table 10). 

Table 10 - Initialization pattern modifier 


ip Modifier 

Description 

00b 

01b 

10b 

11b 

No header. 1 he device server shall not modify the initialization pattern. 

The device server shall overwrite the initialization pattern to write the logical block 
address in the first four bytes of the logical block. The logical block address shall be 
written with the most significant byte first. 

The device server shall overwrite the initialization pattern to write the logical block 
address in the first four bytes of each physical block contained within the logical block. 

The lowest numbered logical block or part there of that occurs within the physical block 
is used. The logical block address snail be written with the most significant byte first. 
Reserved. 
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The initialization pattern type field (see Table 11 ) indicates the type of pattern the device server shall use 
to initialize each logical block within the application client accessible portion of the medium. All bytes 
within a logical block shall be written with the initialization pattern. The initialization pattern is modified 
by the ip modifier field as described in Table 10. 

A security initialize (si) bit of one indicates that the device server shall attempt to write the initialization 
pattern to all areas of the media including those that may have been reassigned. An si bit of one shall 
take precedence over any other FORMAT UNIT field. The initialization pattern shall be written using a 
security erasure write technique. Application clients may choose to use this command multiple times to 
fully erase the previous data. Such security erasure write technique procedures are outside the scope of 
this standard. The exact requirements placed on the security erasure write technique are vendor-specific. 
The intent of the security erasure write is to render any previous user data unrecoverable by any analog 
or digital technique. 

An si bit of zero indicates that the device server shall initialize the application client accessible area of 
the media. The device server is not required to initialize other areas of the media. However, the device 
server shall format the medium as defined in the FORMAT UNIT command. 

When the si bit is one, the device server need not rewrite (format) header and other information not 
previously accessible to the application client. If any area of the medium that previously was accessible 
to the application client cannot be written, the device server shall terminate the command with CHECK 
CONDITION status and the sense key shall be set to MEDIUM ERROR with the appropriate additional 
sense code for the condition. 


Table 11 - Initialization pattern type 


Initialization 
pattern type 

Description 

OOh 

01 h 

02h - 7Fh 

80h - FFh 

Use default pattern, (note 1) 

Repeat the initialization pattern as required to fill the logical block, (note 2) 

Reserved 

Vendor-specific 

Notes 

(1) If the initialization pattern length is not zero the device server shall terminate the command with 

CHECK CONDITION status and the sense key shall be set to ILLEGAL REQUEST with the additional 
sense code set to INVALID FIELD IN PARAMETER LIST. 

(2) If the initialization pattern length is zero the device server shall terminate the command with 

CHECK CONDITION status and the sense key shall be set to ILLEGAL REQUEST with the additional 
sense code set to INVALID FIELD IN PARAMETER LIST. 


The initialization pattern length field indicates the number of bytes contained in the initialization pattern. 

If the length exceeds the current logical block size the device server shall terminate the command with 
CHECK CONDITION status and the sense key shall be set to ILLEGAL REQUEST with the additional 
sense code set to INVALID FIELD IN PARAMETER LIST. The pattern is modified by the ip modifier field. 


6.1.2 LOCK UNLOCK CACHE command 

The LOCK UNLOCK CACHE command (see Table 12) requests that the device server disallow or allow 
logical blocks within the specified range to be removed from the cache memory by the device server's 
cache replacement algorithm. Locked logical blocks may be written to the medium when modified, but a 
copy of the modified logical block shall remain in the cache memory. 
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Table 12 - LOCK UNLOCK CACHE command 



If the logical unit is reserved, a reservation conflict shall occur when a LOCK UNLOCK CACHE 
command is received from an initiator other than the one holding a logical unit reservation. The 
command shall be rejected with RESERVATION CONFLICT status if the reservation conflict is due to a 
logical unit reservation. The LOCK UNLOCK CACHE command shall be evaluated for extent reservation 
conflicts as if it were performing normal write and read operations. LOCK UNLOCK CACHE commands 
with a reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall 
be set to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
LOCK UNLOCK CACHE operation is prohibited by an extent reservation. 

A lock bit of zero indicates that all logical blocks in the specified range that are currently locked into the 
cache memory shall be unlocked, but may not be removed. A lock bit of one indicates that any logical 
block in the specified range that is currently present in the cache memory shall be locked into cache 
memory. Only logical blocks that are already present in the cache memory are actually locked. 

A relative address (reladr) bit of zero indicates that the logical block address field specifies the first 
logical block of the range of logical blocks for this command. 

A reladr bit of one indicates that the logical block address field is a two's complement displacement. This 
negative or positive displacement shall be added to the logical block address last accessed on the block 
device to form the logical block address for this command. This feature is only available with linked 
commands. This feature also requires that a previous command in the linked group has accessed a 
block of data on the block device. 

The number of blocks field specifies the total number of contiguous logical blocks within the range. A 
number of blocks field of zero indicates that all remaining logical blocks on the block device shall be 
within the range. 

Multiple locks may be in effect from more than one application client. Locks from different application 
clients may overlap. An unlock of an overlapped area does not release the lock of another initiator. 
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6.1.3 PRE-FETCH command 

The PRE-FETCH command (see Table 13) requests that the device server transfer the specified logical 
blocks to the cache memory. No data shall be transferred to the application client. 



If the logical unit is reserved, a reservation conflict shall occur when a PRE-FETCH command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The PRE-FETCH command shall be evaluated for extent reservation conflicts as if it were 
performing normal read operations. PRE-FETCH commands with a reservation conflict shall be 
terminated with CHECK CONDITION status and the sense key shall be set to DATA PROTECT with the 
appropriate additional sense code for the condition if any part of the PRE-FETCH operation is prohibited 
by an extent reservation. 

An immediate (immed) bit of zero indicates that status shall be returned after the operation is complete. 

An immed bit of one indicates that status shall be returned as soon as the command descriptor block has 
been validated. 

See 6.1.2 for a definition of the reladr bit and the logical block address field. 

The transfer length field specifies the number of contiguous logical blocks of data that shall be 
transferred to the block device's cache memory. A transfer length of zero indicates that the contiguous 
logical blocks up to and including the last logical block of the block device shall be transferred to the 
block device's cache memory. Any other value indicates the number of logical blocks that shall be 
transferred. The device server may elect to not transfer logical blocks that already are contained in the 
cache memory. 

If the immed bit is zero and the specified logical blocks were successfully transferred to the cache 
memory, the device server shall return CONDITION MET status. If the link bit (see ANSI NCITS 301 
SPC) is one, the device server shall return INTERMEDIATE-CONDITION MET status. 

If immed is one, and the unlocked cache memory has sufficient capacity to accept all of the specified 
logical blocks, the device server shall return CONDITION MET status. If the link bit is one, and the 
unlocked cache memory has sufficient capacity to accept all of the specified logical blocks, the device 
server shall return INTERMEDIATE-CONDITION MET status. 

If immed is one, and the unlocked cache memory does not have sufficient capacity to accept all of the 
specified logical blocks, the device server shall return GOOD status. The device server shall transfer to 
cache memory as many logical blocks that fit. If the link bit is one, the device server shall return 
INTERMEDIATE status. 
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6.1.4 READ(6) command 

The READ(6) command (see Table 14) requests that the device server transfer data to the application 
client. The most recent data value written, or to be written if cached, in the addressed logical block shall 
be returned. 


Table 14 - READ(6) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (08h) 

1 

Reserved I (MSB) 

2 

LOGICAL BLOCK ADDRESS 

3 

(LSB) 

4 

TRANSFER LENGTH 

5 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when a READ(6) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
READ(6) command shall be evaluated for extent reservation conflicts. READ(6) commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
READ(6) operation is prohibited by an extent reservation. 

The cache control bits (see 6.1.5) are not provided for this command. Block devices with cache memory 
may have values for the cache control bits that affect the READ(6) command; however, no default value 
is defined by this standard. If explicit control is required, the READ(IO) command should be used. 

The logical block address field specifies the logical block where the read operation shall begin. 

The transfer length field specifies the number of contiguous logical blocks of data to be transferred. A 
transfer length of zero indirectly indicates that 256 logical blocks shall be transferred. Any other value 
directly indicates the number of logical blocks that shall be transferred. 

Note 6 - Although the READ(6) command is limited to directly addressing logical blocks up to a 
capacity of 2 Giga bytes, for logical block sizes of 512 bytes, this command has been maintained 
as mandatory since some system initialization routines require that the READ(6) command be 
used. Application clients should migrate from the READ(6) command to the READ(IO) command 
which may address 2 Tera bytes with logical block sizes of 512 bytes. 
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6.1.5 READ(IO) command 

The READ(IO) command (see Table 15) requests that the device server transfer data to the application 
client. The most recent data value written in the addressed logical block shall be returned. 



If the logical unit is reserved, a reservation conflict shall occur when a READ(IO) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
READ(IO) command shall be evaluated for extent reservation conflicts. READ(IO) commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
READ(IO) operation is prohibited by an extent reservation. 

A disable page out (dpo) bit of zero indicates the priority shall be determined by the retention priority 
fields in the caching page. A dpo bit of one indicates that the device server shall assign the logical 
blocks accessed by this command the lowest priority for being fetched into or retained by the cache. A 
dpo bit of one overrides any retention priority specified in the caching page (see 7.1.3.1). All other 
aspects of the algorithm implementing the cache memory replacement strategy are not defined by this 
standard. 

Note 7 - The dpo bit is used to control replacement of logical blocks in the cache memory when the 
host has information on the future usage of the logical blocks. If the dpo bit is one, the host is 
indicating that the logical blocks accessed by the command are not likely to be accessed again in 
the near future and should not be put in the cache memory nor retained by the cache memory. If 
the dpo bit is zero, the host is indicating that the logical blocks accessed by this command are 
likely to be accessed again in the near future. 


A force unit access (fua) bit of zero indicates that the device server may satisfy the command by 
accessing the cache memory. For read operations, any logical blocks that are contained in the cache 
memory may be transferred to the application client directly from the cache memory. For write 
operations, logical blocks may be transferred directly to the cache memory. GOOD status may be 
returned to the application client prior to writing the logical blocks to the medium. Any error that occurs 
after the GOOD status is returned is a deferred error, and information regarding the error is not reported 
until a subsequent command. 

A (fua) bit of one indicates that the device server shall access the media in performing the command 
prior to returning GOOD status. Read commands shall access the specified logical blocks from the 
media (i.e., the data is not directly retrieved from the cache). If the cache contains a more recent 
version of a logical block than the media, the logical block shall first be written to the media. Write 
commands shall not return GOOD status until the logical blocks have actually been written on the media 
(i.e., the data is not write cached). Read commands that cause data to be written to the media from 
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cache and that encounter an error shall cause a deferred error to be reported. See ANSI NCITS 301 
SPC. 


See 6.1.2 for a definition of the reladr bit and the logical block address field. 

The transfer length field specifies the number of contiguous logical blocks of data that shall be 
transferred. A transfer length of zero indicates that no logical blocks shall be transferred. This condition 
shall not be considered an error. Any other value indicates the number of logical blocks that shall be 
transferred. 

6.1.6 READ CAPACITY command 

The READ CAPACITY command (see Table 16) provides a means for the application client to request 
information regarding the capacity of the block device. 



If the logical unit is reserved, a reservation conflict shall occur when a READ CAPACITY command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. READ CAPACITY commands with a reservation conflict shall be terminated with 
RESERVATION CONFLICT status. The READ CAPACITY command shall not be evaluated for extent 
reservation conflicts (e.g., extent reservations do not conflict with the READ CAPACITY command). 

See 6.1.2 for a definition of the reladr bit and the logical block address field. 

The logical block address shall be zero if the pmi bit is zero. If the pmi bit is zero and the logical block 
address is not zero, the device server shall return a CHECK CONDITION status and the sense key shall 
be set to ILLEGAL REQUEST with the additional sense code set to ILLEGAL FIELD IN CDB. 

A partial medium indicator (pmi) bit of zero indicates that the returned logical block address and the 
block length in bytes are those of the last logical block on the block device. 

A pmi bit of one indicates that the returned logical block address and block length in bytes are those 
of the last logical block address before a substantial delay in data transfer may be encountered. This 
returned logical block address shall be greater than or equal to the logical block address specified by the 
reladr and logical block address fields in the command descriptor block. 


Note 8 - This function is intended to assist storage management software in determining whether 
there is sufficient space on the current track, cylinder, etc., to contain a frequently accessed data 
structure, such as a file directory or file index, without incurring an access delay. 


The READ CAPACITY data (see Table 17) shall be sent during the data-in buffer transfer of the 
command. 
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Table 17 - READ CAPACITY data 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 







3 




RETURNED LOGICAL BLOCK ADDRESS 

1E5B 

4 

(MSB) 







7 




BLOCK LENGTH IN BYTES 


“(E5B) 


6.1.7 READ DEFECT DATA (10) command 

The READ DEFECT DATA (10) command (see Table 18) requests that the device server transfer the 
medium defect data to the application client. 


Table 18 - READ DEFECT DATA (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (37h) 

1 

Reserved 

2 

Reserved | plist | glist | defect list format 

3 

Reserved 

4 

Reserved 

5 

Reserved 

6 

Reserved 

7 

(MSB) 

8 

ALLOCATION LENGTH (LSB) 

9 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when a READ DEFECT DATA (10) 
command is received from an initiator other than the one holding a logical unit reservation. The 
command shall be rejected with RESERVATION CONFLICT status if the reservation conflict is due to a 
logical unit reservation. READ DEFECT DATA (10) commands with a reservation conflict shall be 
terminated with RESERVATION CONFLICT status. The READ DEFECT DATA (10) command shall not 
be evaluated for extent reservation conflicts (e.g., extent reservations do not conflict with the READ 
DEFECT DATA (10) command). 

If the device server is unable to access the medium defect data, it shall terminate the command with 
CHECK CONDITION status and the sense key shall be set to either MEDIUM ERROR, if a medium error 
occurred, or NO SENSE, if the list does not exist; with the additional sense code set to DEFECT LIST 
NOT FOUND. 


Note 9 - Some device servers may not be able to return medium defect data until after a FORMAT 
UNIT command has been completed successfully. 


A primary defect list (plist) bit of zero requests that the device server not return the primary list of 
defects. A plist bit of one requests that the device server return the primary list of defects. 

A grown defect list (gust) bit of zero requests that the device server not return the grown defect list. A 
glist bit of one requests that the device server return the grown defect list. 

A plist bit of zero and a glist bit of zero requests that the device server return only the defect list 
header. 
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A plist bit of one and a gust bit of one requests that the device server return the primary and the grown 
defect lists. The order the lists are returned in is vendor-specific. Whether the lists are merged or not 
is vendor-specific. 

The defect list format field is used by the application client to indicate the preferred format for the defect 
list. This field is intended for those device servers capable of returning more than one format, as defined 
in the FORMAT UNIT command (see 6.1.1.1, defect list format). A device server unable to return the 
requested format shall return the defect list in its default format (see the defect list format field in the 
defect list header below). 

If the requested defect list format and the returned defect list format are not the same, the device server 
shall transfer the defect data and then terminate the command with CHECK CONDITION status and the 
sense key shall be set to RECOVERED ERROR with the additional sense code set to DEFECT LIST 
NOT FOUND. 

The READ DEFECT DATA (10) defect list (see Table 19) contains a four-byte header, followed by zero 
or more defect descriptors. 


Table 19 - READ DEFECT DATA (10) defect list 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

Reserved 

1 

Reserved I plist | glist | defect list format 

2 

(MSB) 

3 

Defect list length (LSB) 


defect descriptor(s) (if any) 

0 

DEFECT DESCRIPTOR 0 

n 

(See specific table for length.) 



0 

DEFECT DESCRIPTOR X 

n 

(See specific table for length.) 


A plist bit of zero indicates that the data returned does not contain the primary defect list. A plist bit of 
one indicates that the data returned contains the primary defect list. 


A glist bit of zero indicates that the data returned does not contain the grown defect list. A gust bit of 
one indicates that the data returned contains the grown defect list. 

The defect list format field indicates the format of the defect descriptors returned by the device server. 
This field is defined in the FORMAT UNIT command (see 6.1.1.1). 


Note 10 - The use of the block format is not recommended. There is no standard model that 
defines the meaning of the logical block address of a defect. In the usual case, a defect that has 
been reassigned no longer has a logical block address. 


Defect descriptors returned in the block format are vendor-specific. Defect descriptors returned in the 
physical sector format may or may not include defects in areas not accessible to the application client. 
Defect descriptors returned in bytes-from-index format shall comprise a complete list of the defects. A 
complete list of the defects may include defects in areas not within the capacity returned in the READ 
CAPACITY command. 
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The defect list length field specifies the length in bytes of the defect descriptors that follow. The defect 
list length is equal to four or eight times the number of the defect descriptors, depending on the format 
of the returned descriptors (see 6.1.1.1). 

If the allocation length is insufficient to transfer all of the defect descriptors, the defect list length shall 
not be adjusted to reflect the truncation and the device server shall not create a CHECK CONDITION 
status. The application client is responsible for comparing the defect list length and the allocation length 
to determine that a partial list was received. 


Note 11 - The application client may determine the length of the defect list by sending the READ 
DEFECT DATA (10) command with an allocation length of four. The device server returns the 
defect list header that contains the length of the defect list. 


The defect descriptors may or may not be sent in ascending order. The application client may determine 
the exact number of the defects by dividing the defect list length by the length of a single defect 
descriptor for the returned format. 

6.1.8 READ LONG command 

The READ LONG command (see Table 20) requests that the device server transfer data to the 
application client. The data passed during the READ LONG command is vendor-specific, but shall 
include the data bytes and the ECC bytes recorded on the medium. The most recent data written, or to 
be written, in the addressed logical block shall be returned. READ LONG is independent of the read-write 
error recovery page but does allow retries. 

Table 20 - READ LONG command 



If the logical unit is reserved, a reservation conflict shall occur when a READ LONG command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The READ LONG command shall be evaluated for extent reservation conflicts. READ 
LONG commands with a reservation conflict shall be terminated with CHECK CONDITION status and 
the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the READ LONG operation is prohibited by an extent reservation. 

Any other bytes that can be corrected by ECC should be included (e.g., data synchronization mark within 
the area covered by ECC). It is not required for the ECC bytes to be at the end of the data bytes; 
however, they should be in the same order as they are on the media. 

A correct (corrct) bit of zero requests that a logical block be read without any correction made by the 
device server. A corrct bit of 0 should result with GOOD status unless data is not transferred for some 
reason other than that the data is non-correctable. In this case the appropriate status and/or sense data 
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shall be set. A corrct bit of one requests that the data be corrected by ECC before being transferred to 
the application client. 

See 6.1.2 for a definition of the reladr bit and the logical block address field. 

The byte transfer length field species the number of bytes of data that should be transferred. If a non¬ 
zero byte transfer length does not match the available data length, the device server shall terminate the 
command with CHECK CONDITION status and the sense key shall be set to ILLEGAL REQUEST with 
the additional sense code set to INVALID FIELD IN CDB. The valid and ili bits (see ANSI NCITS 301 
SPC) shall be set to one and the information field shall be set to the difference (residue) of the requested 
length minus the actual length in bytes. Negative values shall be indicated by two's complement 
notation. 

A byte transfer length of zero indicates that no bytes shall be transferred and shall not be considered an 
error. 

6.1.9 REASSIGN BLOCKS command 

The REASSIGN BLOCKS command (see Table 21) requests the device server to reassign the defective 
logical blocks to another area on the medium set aside for this purpose. The device server should also 
record the location of the defective logical blocks to the grown defect list if such a list is supported. More 
than one physical or logical block may be relocated by each defect descriptor sent by the application 
client. This command does not alter the contents of the plist (see 6.1.1, FORMAT UNIT command). 


Table 21 - REASSIGN BLOCKS command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

operation code (07h) 

1 

Reserved 

2 

Reserved 

3 

Reserved 

4 

Reserved 

5 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when a REASSIGN BLOCKS command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The REASSIGN BLOCKS command shall be evaluated for extent reservation conflicts. Any 
overlap in logical block addresses between the REASSIGN BLOCKS command and an extent 
reservation of any type, shall be an extent reservation conflict. A REASSIGN BLOCKS command with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
REASSIGN BLOCKS operation is prohibited by an extent reservation. 

The application client transfers a defect list that contains the logical block addresses to be reassigned. 
The device server shall reassign the physical medium used for each logical block address in the list. The 
data contained in the logical blocks specified in the defect list may be altered, but the data in all other 
logical blocks on the medium shall be preserved. 


Note 12 - The effect of specifying a logical block to be reassigned that previously has been 
reassigned is to reassign the block again. Although not likely, over the life of the medium, a 
logical block may be assigned to multiple physical addresses until no more spare locations remain 
on the medium. 
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The REASSIGN BLOCKS defect list (see Table 22) contains a four-byte header followed by one or more 
defect descriptors. The length of each defect descriptor is four bytes. 
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Table 22 - REASSIGN BLOCKS defect list 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

Reserved 

1 

Reserved 

2 

(MSB) 

3 

DEFECT LIST LENGTH (LSB) 


DEFECT DESCRIPTOR(S) 

0 

(MSB) 

3 

DEFECT LOGICAL BLOCK ADDRESS (LSB) 



n - 3 

(MSB 

n 

DEFECT LOGICAL BLOCK ADDRESS (LSB 


The defect list length field specifies the total length in bytes of the defect descriptors that follow. The 
defect list length is equal to four times the number of defect descriptors and does not include the defect 
list header length. 

The defect descriptor specifies a four-byte defect logical block address that contains the defect. The 
defect descriptors shall be in ascending order. 

If the block device has insufficient capacity to reassign all of the logical blocks specified in the defect 
descriptors, the command shall terminate with CHECK CONDITION status and the sense key shall be 
set to HARDWARE ERROR with the additional sense code set to NO DEFECT SPARE LOCATION 
AVAILABLE. 

If the block device is unable to successfully complete a REASSIGN BLOCKS command, the command 
shall terminate with CHECK CONDITION status with the appropriate sense information. The logical 
block address of the first defect descriptor not reassigned shall be returned in the command-specific 
information field of the sense data. If information about the first defect descriptor not reassigned is not 
available, or if all the defects have been reassigned, this field shall be set to FFFFFFFFh. 

If the REASSIGN BLOCKS command failed due to an unexpected unrecoverable read error that would 
cause the loss of data in a block not specified in the defect list, the logical block address of the 
unrecoverable block shall be returned in the information field of the sense data and the valid bit shall be 
set to one. 


Note 13 - If the REASSIGN BLOCKS command returns CHECK CONDITION status and the sense 
data command-specific information field contains a valid logical block address, the application client 
should remove all defect descriptors from the defect list prior to the one returned in the command- 
specific information field. If the sense key is MEDIUM ERROR and the valid bit is one (the 
information field contains the valid block address) the application client should insert that new 
defective logical block address into the defect list and reissue the REASSIGN BLOCKS command 
with the new defect list. Otherwise, the application client should perform any corrective action 
indicated by the sense data and then reissue the REASSIGN BLOCKS command with the new 
defect list. 
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6.1.10 REBUILD Command 

The REBUILD command (see 

Table 23) requests that the target write to the medium the XOR data generated from the specified source 
devices. The target, acting as a temporary initiator, issues READ commands to retrieve the specified 
data. 



For a definition of the dpo and fua bits see 6.1.5. 

If the intermediate data (intdata) bit is zero, then intermediate data is not sent with the rebuild parameter 
list (see 

Table 25). If the bit is one, the rebuild parameter list includes intermediate data. The length of the 
intermediate data may be calculated by multiplying the rebuild length times the block size. This data shall 
be treated as an additional source, and an XOR operation performed with it and the data from the 
specified sources. 

The port control field is defined in Table 24. If the port control field has a value of 01b and the target 
is not a multiple port device the command shall be terminated with a CHECK CONDITION status and the 
sense data shall be set to ILLEGAL REQUEST with the additional sense code set to INVALID FIELD IN 
CDB. 


Table 24 - port control field 













Note 14 - The target that receives the REBUILD command is not one of the source devices. If 
only one source is specified, then an XOR operation does not occur. This case may occur in disk 
mirroring applications. 

If the command terminates with CHECK CONDITION status the sense data shall contain the logical 
block address of the failed block with the lowest logical block address. All logical blocks affected by the 
command and having a logical block address lower than that of the reported failing block shall have been 
rebuilt and written to the medium. 
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The logical block address field specifies the starting logical block address where the target shall write the 
XOR result data on its own medium. The rebuild length field specifies the number of blocks to be written 
to the medium. It also specifies the number of blocks that are read from each source. 

The parameter list length field specifies the length in bytes of the parameter list that shall be transferred 
from the initiator to the target. The REBUILD parameter data is described in 
Table 25. 


Table 25 - REBUILD and REGENERATE parameter data 


Byte/Bit 

7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 

! o 

NUMBER OF SOURCE DESCRIPTORS (x) 

1 

Reserved j 

2 

MSB 

SOURCE DESCRIPTOR/PAD LENGTH LSB 

3 


source descriptor(s) (if any) 

4 

19 

source descriptor (first) 



16x-12 

16x + 3 

SOURCE DESCRIPTOR (last) 

16x + 4 

pad, if any (length y) 

16x+y+3 

16x+y+4 

MSB 

intermediate data, if any (length z) 

LSB 


16x+y+z+3 


The number of source descriptor field indicates the number of source descriptors in the parameter data. 

The source descriptor/pad length specifies the sum of the lengths in bytes of all of the source descriptors 
and the pad. 

The source descriptors identify the source device target identifiers and starting logical block addresses 
on the devices for the regenerate or rebuild operation. See Table 26 for the source descriptor format. 



The source device address field specifies a ANSI X3.270 SAM compliant target identifier of a device that 
is a data source. 

The source starting logical block address field indicates the starting logical block address to use when 
reading data from the source specified in the source device address field. 
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The pad field accommodates initiators that require the intermediate data to be aligned on a particular 
memory boundary. The pad field shall be ignored. 


The intermediate data field contains data that shall be used in the XOR operation with the data from the 
specified source devices. The length of the data is equal to the rebuild/regenerate length multiplied by 
the block size. 

6.1.11 REGENERATE command 

The REGENERATE command (see Table 27) requests that the target write to the buffer the XOR data 
generated from its own medium and the specified source devices. The target, acting as a temporary 
initiator, issues READ commands to retrieve the specified data. 

Table 27 - REGENERATE command 



The resulting XOR data is retained in the target’s buffer until it is retrieved by an XDREAD command 
with a starting logical block address and transfer length that match, or is a subset of, the logical block 
address and regenerate length of this command. 

See 6.1.5 for a definition of the dpo & fua bits and 6.1.10 for a definition of the intdata and port control 
fields. 

The logical block address field specifies the starting logical block address for the target to read data from 
its own medium. This data is a source for the regenerate operation. 

The regenerate length field indicates the length in logical blocks of the resulting XOR data. It also 
specifies the length in logical blocks that is transferred from each of the specified sources. 

The parameter data for the REGENERATE command is defined in 

Table 25. The parameter data describes the other devices that are sources for the regenerate operation. 
The target receiving the REGENERATE command is implicitly a source, and is not included in the 
parameter data. 

6.1.12 SEEK(10) command 

The SEEK(10) (see Table 28) command requests that the block device seek to the specified logical 
block address. This command is included for device types based on the MMC standard. This command 
allows the host to provide advanced notification that particular data may be requested in a subsequent 
command. 

If the logical unit is reserved, a reservation conflict shall occur when a SEEK command is received from 
an initiator other than the one holding a logical unit reservation. The command shall be rejected with 
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RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
SEEK command shall be evaluated for extent reservation conflicts as if it were a read operation. SEEK 
commands with a reservation conflict shall be terminated with CHECK CONDITION status and the sense 
key shall be set to DATA PROTECT with the appropriate additional sense code for the condition if any 
part of the SEEK operation is prohibited by an extent reservation. 



6.1.13 SET LIMITS(IO) command 

The SET LIMITS command (see Table 29) defines the range where subsequent linked commands may 
operate. A second SET LIMITS command shall not be linked to a chain of commands if a SET LIMITS 
command has already been issued in the chain. If a second SET LIMITS command within a linked list of 
commands is detected, the command shall be rejected with CHECK CONDITION status and the sense 
key shall be set to DATA PROTECT with the appropriate additional sense code for the condition. 



If the logical unit is reserved, a reservation conflict shall occur when a SET LIMITS command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
SET LIMITS command shall be evaluated for extent reservation conflicts. An overlap with an extent 
reservation of any type shall be detected as a reservation conflict. SET LIMITS commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the SET 
LIMITS operation is prohibited by an extent reservation. 


A read inhibit (rdinh) bit of zero indicates that read operations within the range are not inhibited. 
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A rdinh bit of one indicates that read operations within the range shall be inhibited. 


A write inhibit (wrinh) bit of zero indicates that write operations within the range are not inhibited. A write 
inhibit (wrinh) bit of one indicates that write operations within the range shall be inhibited. 

The logical block address field specifies the starting address for the range. 

The number of blocks field specifies the number of logical blocks within the range. A number of blocks of 
zero indicates that the range shall extend to the last logical block on the block device. 

Any attempt to access outside of the restricted range or any attempt to perform an inhibited operation 
within the restricted range shall cause the function to not be performed. The command shall be 
terminated with CHECK CONDITION status and the sense key shall be set to DATA PROTECT with the 
appropriate additional sense code for the condition. 


6.1.14 START STOP UNIT command 

The START STOP UNIT command (see Table 30) requests that the device server enable or disable the 
block device for media access operations and controls certain power conditions. 


Table 30 - START STOP UNIT command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (1 Bh) 

1 

Reserved | immed 

2 

Reserved 

3 

Reserved 

4 

power conditions I Reserved I loej | start 

5 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when a START STOP UNIT command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The START STOP UNIT command shall be evaluated for extent reservation conflicts. Any 
extent reservation of any type shall be detected as a reservation conflict. START STOP UNIT 
commands with a reservation conflict shall be terminated with CHECK CONDITION status and the sense 
key shall be set to DATA PROTECT with the appropriate additional sense code for the condition if an 
extent reservation is active for the logical unit. 

An immediate (immed) bit of zero indicates that status shall be returned after the operation is completed. 
An immed bit of one indicates that status shall be returned as soon as the command descriptor block has 
been validated. 

The power conditions field requests the block device to be placed in the power condition defined in Table 
31. If this field has a value other than Oh then the start and the loej bits shall be ignored. 
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Table 31 - power conditions 


Code 

Description 

Oh 

No change in power conditions or in the device that is controlling power conditions 

1h 

Place device into the Active condition 

2h 

Place device into Idle condition 

3h 

Place device into Standby condition 

4h 

Reserved 

5h 

Place device into Sleep condition 

6h 

Reserved 

7h 

Transfer control of power conditions to block device 

8h-9h 

Reserved 

Ah 

Force Idle Condition Timer to zero 

Bh 

Force Standby Condition Timer to zero 

Ch-Fh 

Reserved 


There shall be no indication from the block device that it has entered the requested power condition. An 
application client may determine if a power condition is active by issuing a request sense command to 
the logical unit (see 5.1.4). 

If the START STOP UNIT command is issued with the power conditions field set to 1 h, 2h, or 3h the 
block device shall: 

a) change power conditions only on receipt of another START STOP UNIT command or a RESET 
task management function or RESET SERVICE DELIVERY SUBSYSTEM; 

b) suspend any Power Condition timers (see 7.1.3.6) that are active on receipt of the START STOP 
UNIT command until another START STOP UNIT command is received that returns control of 
the power condition to the block device or a RESET task management function or RESET 
SERVICE DELIVERY SUBSYSTEM occurs; 

c) terminate any command received that requires more power than allowed by the START STOP 
UNIT command’s most recent power condition setting with a CHECK CONDITION status and the 
sense key shall be set to ILLEGAL REQUEST with the additional sense code set to LOW 
POWER CONDITION ACTIVE. 


If the START STOP UNIT command is issued with the power condition field set to 5h the server shall: 

a) suspend any Power Condition timers that are active on receipt of the START STOP UNIT 
command until a WAKEUP task management function is received by the device server; 


b) not respond to a task requests until a WAKEUP task management function is received by the 
device server. 

On receipt of a WAKEUP task management function any previously active power conditions timers shall 
be restored to those values indicated by the saved power condition mode page parameters. Before 
returning a function complete response the target shall place itself into a condition capable of receiving 
commands and task management functions and shall create a unit attention condition for all initiators. 
The sense key shall be set to UNIT ATTENTION and the additional sense code set to LOW POWER 
CONDITION ACTIVE. 


If the START STOP UNIT command is issued with the power conditions field set Ah or Bh the block 
device shall: 
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a) force the selected timer(s) to zero. Forcing the timer(s) to zero shall place the block device into 
the same power condition that would have occurred if the timer(s) would have timed out. After 
the timer(s) are set to zero control of the power conditions is returned to the block device; 

b) terminate any START STOP UNIT command that selects a timer that is not supported by the 
block device or a timer that has been disabled with a CHECK CONDITION status and the sense 
key shall be set to ILLEGAL REQUEST with the additional sense code set to INVALID FIELD IN 
CDB. 

It is not an error to request the block device be placed into a power condition that already exists. 

In the Sleep condition the device server shall only respond to a WAKEUP task management function. 
When a target has multiple logical units attached it shall enter the Sleep condition only after all the 
logical units have been placed into a Sleep condition. 

A load eject (loej) bit of zero requests that no action be taken regarding loading or ejecting the medium. 
A loej bit of one requests that the medium shall be unloaded if the start bit is zero. A loej bit of one 
requests that the medium is to be loaded if the start bit is one. 

A start bit of zero requests that the block device be stopped (media shall not be accessed by the 
application client). A start bit of one requests the block device be made ready for use. 

Block devices that contain cache memory shall implicitly perform a SYNCHRONIZE CACHE command 
for the entire medium prior to executing the STOP UNIT command. 


6.1.15 SYNCHRONIZE CACHE command 

The SYNCHRONIZE CACHE command (see Table 32) ensures that logical blocks in the cache memory, 
within the specified range, have their most recent data value recorded on the physical medium. If a 
more recent data value for a logical block within the specified range exists in the cache memory than on 
the physical medium, then the logical block from the cache memory shall be written to the physical 
medium. Logical blocks may not be removed from the cache memory as a result of the synchronize 
cache operation. The SYNCHRONIZE CACHE function is also required implicitly by other SCSI 
functions as defined in other clauses of this standard. 



If the logical unit is reserved, a reservation conflict shall occur when a SYNCHRONIZE CACHE 
command is received from an initiator other than the one holding a logical unit reservation. The 
command shall be rejected with RESERVATION CONFLICT status if the reservation conflict is due to a 
logical unit reservation. The SYNCHRONIZE CACHE command shall be evaluated for extent reservation 
conflicts as if it were a write operation. SYNCHRONIZE CACHE commands with a reservation conflict 
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shall be terminated with CHECK CONDITION status and the sense key shall be set to DATA PROTECT 
with the appropriate additional sense code for the condition if any part of the SYNCHRONIZE CACHE 
operation is prohibited by an extent reservation. 

An immediate (immed) bit of zero indicates that the status shall not be returned until the operation has 
been completed. An immed bit of one indicates that the device server shall return status as soon as the 
command descriptor block has been validated. If the immed bit is one and the device server does not 
support the immed bit, the command shall terminate with CHECK CONDITION status and the sense key 
shall be set to ILLEGAL REQUEST with the additional sense code set to INVALID FIELD IN CDB. 

See 6.1.2 for a definition of the reladr bit and the logical block address field. 

The number of blocks field specifies the total number of contiguous logical blocks within the range. A 
number of blocks of zero indicates that all remaining logical blocks on the block device shall be within 
the range. 

A logical block within the specified range that is not in cache memory is not considered an error. 

6.1.16 VERIFY command 

The VERIFY command (see Table 33) requests that the device server verify the data written on the 
medium. 



If the logical unit is reserved, a reservation conflict shall occur when a VERIFY command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
VERIFY command shall be evaluated for extent reservation conflicts as if it were a read operation. 
VERIFY commands with a reservation conflict shall be terminated with CHECK CONDITION status and 
the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the VERIFY operation is prohibited by an extent reservation. 

If the MODE SELECT command is implemented, and the verify error recovery parameters page is also 
implemented, then the current settings in that page specifies the verification error criteria. If the verify 
error recovery parameters page is not implemented, then the verification criteria is vendor-specific. 

If the byte check (bytchk) bit is zero, a medium verification shall be performed with no data comparison. 

If the bytchk bit is one, a byte-by-byte comparison of data written on the medium and the data transferred 
from the application client shall be performed. If the comparison is unsuccessful for any reason, the 
device server shall return CHECK CONDITION status and the sense key shall be set to MISCOMPARE 
with the appropriate additional sense code for the condition. 
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See 6.1.2 for a definition of the reladr bit and the logical block address field. 


The verification length field specifies the number of contiguous logical blocks of data that shall be 
verified. A transfer length of zero indicates that no logical blocks shall be verified. This condition shall 
not be considered as an error. Any other value indicates the number of logical blocks that shall be 
verified. 

See 6.1.5 for a description of the cache control bit (dpo). 

6.1.17 WRITE(6) command 

The WRITE(6) command (see Table 34) requests that the device server write the data transferred by the 
application client to the medium. 


Table 34 - WRITE(6) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (OAh) 

1 

Reserved | (MSB) i 

2 

logical block address 

3 

(LSB) 

4 

TRANSFER LENGTH 

5 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when a WRITE(6) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
WRITE(6) command shall be evaluated for extent reservation conflicts. WRITE(6) commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
WRITE(6) operation is prohibited by an extent reservation. 

The cache control bits are not provided for this command. Block devices with cache memory may have 
values for the cache control bits that may affect the WRITE(6) command, however no default value is 
defined by this standard. If explicit control is required, the WRITE(IO) command should be used. 

The logical block address field specifies the logical block where the write operation shall begin. 

The transfer length field specifies the number of contiguous logical blocks of data to transferred. A 
transfer length of zero indirectly indicates that 256 logical blocks shall be transferred. Any other value 
directly indicates the number of logical blocks that shall be transferred. 

6.1.18 WRITE(IO) command 

The WRITE(10) command (see Table 35) requests that the device server write the data transferred by 
the application client to the medium. 


Table 35 - WRITE(IO) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (2Ah) 

1 

Reserved | dpo | fua | Reserved | Reserved | reladr 

2 

(MSB) 

3 

LOGICAL BLOCK ADDRESS 

4 


5 

(LSB) 

6 

Reserved 
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7 

(MSB) TRANSFER LENGTH 

8 

(LSB) 

9 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when a WRITE(10) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
WRITE(IO) command shall be evaluated for extent reservation conflicts. WRITE(IO) commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
WRITE(IO) operation is prohibited by an extent reservation. 

See READ(10) command (6.1.5) for a definition of the cache control bits (dpo and fua). 

See 6.1.2 for a definition of the reladr bit and the logical block address field. 

The transfer length field specifies the number of contiguous logical blocks of data that shall be 
transferred. A transfer length of zero indicates that no logical blocks shall be transferred. This condition 
shall not be considered an error and no data shall be written. Any other value indicates the number of 
logical blocks that shall be transferred. 

6.1.19 WRITE AND VERIFY command 

The WRITE AND VERIFY command (see Table 36) requests that the device server write the data 
transferred from the application client to the medium and then verify that the data is correctly written. 

The data is only transferred once from the application client to the device server. 



If the logical unit is reserved, a reservation conflict shall occur when a WRITE AND VERIFY command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The WRITE AND VERIFY command shall be evaluated for extent reservation conflicts. 
WRITE AND VERIFY commands with a reservation conflict shall be terminated with CHECK 
CONDITION status and the sense key shall be set to DATA PROTECT with the appropriate additional 
sense code for the condition if any part of the WRITE AND VERIFY operation is prohibited by an extent 
reservation. 

If the MODE SELECT command is implemented, and the verify error recovery page is also implemented 
(see 7.1.3.9), then the current settings in that page along with the awre bit from the read-write error 
recovery page specify the verification error criteria. If these pages are not implemented, then the 
verification criteria is vendor-specific. 

A byte check (bytchk) bit of zero requests a medium verification to be performed with no data 
comparison. A bytchk bit of one requests a byte-by-byte comparison of data written on the medium and 
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the data transferred from the application client. If the comparison is unsuccessful for any reason, the 
device server shall return CHECK CONDITION status with the sense key set to MISCOMPARE with the 
appropriate additional sense code for the condition. 

See 6.1.2 for a definition of the reladr bit and the logical block address field. 

See WRITE(IO) command (6.1.18) for a definition of the transfer length field. 

See 6.1.5 for a description of the cache control bit (dpo). 

Note 15 - The WRITE AND VERIFY command specifically states that the data are not to be 
transferred twice (i.e., once for the write pass, and once for the verify pass) when performing a 
byte compare. If there is a need for two transfers to occur (e.g., to ensure the integrity of the 
path to the media), then the application client should issue a WRITE command with a LINK bit of 
one followed by a VERIFY command with a bytcmp bit of one, transferring the same data on each 
command. 

6.1.20 WRITE LONG command 

The WRITE LONG command (see Table 37) requests that the device server write the data transferred by 
the application client to the medium. The data passed during the WRITE LONG command is 
implementation specific, but shall include the data bytes and the ECC bytes. 



If the logical unit is reserved, a reservation conflict shall occur when a WRITE LONG command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The WRITE LONG command shall be evaluated for extent reservation conflicts. WRITE 
LONG commands with a reservation conflict shall be terminated with CHECK CONDITION status and 
the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the WRITE LONG operation is prohibited by an extent reservation. 

Note 16 - Any other bytes that can be corrected by ECC should be included (e.g., a data 
synchronization mark within the area covered by ECC). The READ LONG command may be 
issued before issuing a WRITE LONG command. The WRITE LONG data should be the same 
length and in the same order as the data returned by the READ LONG command. 


See 6.1.2 for a definition of the reladr bit and the logical block address field. 

The byte transfer length field should specify the number of bytes of data that the device server would 
return for the READ LONG command. If a non-zero byte transfer length does not exactly match the 
data length the device server would return for the READ LONG command, then the device server shall 
terminate the command with CHECK CONDITION status and the sense key shall be set to ILLEGAL 
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REQUEST with the additional sense code set to INVALID FIELD IN CDB. The ili and valid bits shall be 
set to one and the information field shall be set to the difference (residue) of the requested length minus 
the actual length in bytes. Negative values shall be indicated by two's complement notation. A transfer 
length of zero indicates that no bytes shall be transferred and shall not be considered an error. 

6.1.21 WRITE SAME command 

The WRITE SAME command (see Table 38) requests that the device server write the single block of 
data transferred by the application client to the medium multiple times to consecutive multiple logical 
blocks. 



If the logical unit is reserved, a reservation conflict shall occur when a WRITE SAME command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The WRITE SAME command shall be evaluated for extent reservation conflicts. WRITE 
SAME commands with a reservation conflict shall be terminated with CHECK CONDITION status and 
the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the WRITE SAME operation is prohibited by an extent reservation. 


Note 17 - This command may be useful if large areas of the medium need to be written, prepared 
for certification, or otherwise initialized without the application client having to transfer all the data. 


A logical block data (lbdata) bit of zero and a physical block data (pbdata) bit of zero indicates that the 
single block of data transferred by the application client shall be used without modification. A lbdata bit of 
one requests that the device server replace the first four bytes of the data to be written to the current 
logical block with the logical block address of the block currently being written. 

A pbdata bit of one requests that the device server replace the first eight bytes of the data to be written to 
the current physical sector with the physical address of the sector currently being written using the 
physical sector format (see 6.1.1.1). 

If pbdata and lbdata are one the command shall be terminated with CHECK CONDITION status and the 
sense key shall be set to ILLEGAL REQUEST with the appropriate additional sense code for the 
condition. 

See 6.1.2 for a definition of the reladr bit and the logical block address field. 

The number of blocks field specifies the number of contiguous logical blocks to be written. A number of 
blocks field of zero requests that all the remaining logical blocks on the medium be written. 
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6.1.22 XDREAD command 

The XDREAD command (see Table 39) requests that the target transfer to the initiator the XOR data 
generated by an XDWRITE or REGENERATE command. 



If the logical unit is reserved, a reservation conflict shall occur when an XDREAD command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
XDREAD command shall be evaluated for extent reservation conflicts. XDREAD commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
XDREAD operation is prohibited by an extent reservation. 

The XOR data transferred is identified by the logical block address and transfer length. The logical block 
address and transfer length shall be the same as, or a subset of, those specified in a prior XDWRITE or 
REGENERATE command. If a match is not found the command is terminated with a CHECK 
CONDITION status and the sense key shall be set to ILLEGAL REQUEST with the additional sense code 
set to INVALID FIELD IN CDB. 

6.1.23 XDWRITE command 

The XDWRITE command (see Table 40) requests that the target XOR the data transferred with the data 
on the medium. The resulting XOR data is stored by the target until it is retrieved by an XDREAD 
command. 


Table 40 - XDWRITE command 


Byte/Bit 

7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 

0 

OPERATION CODE (50h) j 

1 

Reserved 1 Reserved 1 Reserved 1 dpo I fua I disable I Reserved 

! | ! S | WRITE | 

2 

MSB j 

3 

LOGICAL BLOCK ADDRESS 

1 4 


5 

LSB 

6 

Reserved j 

! 7 

MSB TRANSFER LENGTH 

! 8 

LSB 

9 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when an XDWRITE command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
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XDWRITE command shall be evaluated for extent reservation conflicts. XDWRITE commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
XDWRITE operation is prohibited by an extent reservation. 

See READ(10) command (6.1.5) for a definition of the cache control bits (dpo and fua). 

A disable write bit of zero indicates that the data transferred from the initiator shall be written to the 
medium after the XOR operation is complete. A disable write bit of one indicates that the data shall not 
be written to the medium. 

The logical block address specifies the starting logical block address of the data on which an XOR 
operation shall be performed with the data from the medium. 

The transfer length field specifies the number of logical blocks that shall be transferred to the XDWRITE 
target and the number of logical blocks on which an XOR operation shall be performed with the data 
from the medium. 

The resulting XOR data is retrieved by an XDREAD command with starting logical block address and 
transfer length fields that match, or is a subset of, the starting logical block address and transfer length 
of this command. 

6.1.24 XDWRITE EXTENDED command 

The XDWRITE EXTENDED command (see Table 41) requests that the target XOR the data transferred 
with the data on the medium. The resulting XOR data may subsequently be sent to a secondary device 
using an XPWRITE command. 

Table 41 - XDWRITE EXTENDED command 


Byte/Bit 

_ 1 _1_6_1_5_1_4_ 

_3 _1_2_1_1_1_0_1 

0 

Operation Code (80h) !| 

1 

table 1 Reserved 1 Reserved 1 dpo 

ADDRESS | | | 

FUA 1 DISABLE 1 PORT CONTROL 

| WRITE | 

! 2 

MSB ! 

I 3 

LOGICAL BLOCK ADDRESS j 

! 4 


5 

LSB 

6 

MSB 

7 

SECONDARY LOGICAL BLOCK ADDRESS 

! 8 


9 

LSB 

! io 

MSB 

i ii 

TRANSFER LENGTH 

! 12 


13 

LSB 

14 

SECONDARY ADDRESS 

1 15 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when an XDWRITE EXTENDED 
command is received from an initiator other than the one holding a logical unit reservation. The 
command shall be rejected with RESERVATION CONFLICT status if the reservation conflict is due to a 
logical unit reservation. The XDWRITE EXTENDED command shall be evaluated for extent reservation 
conflicts. XDWRITE EXTENDED commands with a reservation conflict shall be terminated with CHECK 
CONDITION status and the sense key shall be set to DATA PROTECT with the appropriate additional 
sense code for the condition if any part of the XDWRITE EXTENDED operation is prohibited by an extent 
reservation. 

A table address bit of zero indicates that the secondary address field contains the target identifier of the 
target that will receive the XOR data transfer. The implied LUN of the secondary target shall be zero. If 
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the transport protocol requires more than one byte for the target identifier and the table address bit is 
zero, the secondary address field specifies the least significant byte of the secondary target identifier. The 
upper bytes of the secondary target identifier shall be equal to the upper bytes of the target identifier of 
the XDWRITE EXTENDED target. 

A table address bit of one indicates that the secondary address field contains a pointer to a look up table of 
ANSI X3.270 SAM compliant target identifiers. The look up table is reserved for future definition. 

See 6.1.5 for a definition of the dpo and fua bits. 

A disable write bit of zero indicates that the data transferred from the initiator shall be written to the 
medium after the XOR operation is complete. A disable write bit of one indicates that the data shall not 
be written to the medium. 

See 6.1.10 for a definition of the port control field. If the port control field has a value of 01 b and the 
target is not a multiple port device the command shall be terminated with a CHECK CONDITION status 
and the sense data shall be set to ILLEGAL REQUEST with the additional sense code set to INVALID 
FIELD IN CDB. 

The transfer length field specifies the number of logical blocks that shall be transferred to the XDWRITE 
EXTENDED target, and to the XPWRITE target. 

The XOR data transfer to the secondary target is performed using an XPWRITE command. The 
XPWRITE command shall be sent to the device specified in the secondary address field. The secondary 
logical block address field value shall be placed in the logical block address field of the XPWRITE 
command. The transfer length field value shall be placed in the transfer length field of the XPWRITE 
command. The completion status of the XDWRITE EXTENDED command shall not be returned to the 
initiator until the completion status of the XPWRITE command has been received. 

Note 18 - The XOR data transfer to the secondary target may be broken into multiple XPWRITE 
commands. If this is done, the XDWRITE EXTENDED target calculates the logical block 
addresses and transfer lengths for the individual XPWRITE commands. Also, the completion 
status of the XDWRITE EXTENDED command is not returned to the initiator until the completion 
status of all XPWRITE commands have been received. 

If the prior XPWRITE command terminates with a CHECK CONDITION status and the sense key is not 
set to RECOVERED ERROR the XDWRITE EXTENDED command shall return CHECK CONDITION 
status. 

6.1.25 XPWRITE command 

The XPWRITE command (see Table 42) requests that the target XOR the data transferred with the data 
on the medium and then write the XOR data to the medium. 


Table 42 - XPWRITE command 


Byte/Bit 

7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 

0 

OPERATION CODE (51 h) j 

1 

Reserved I dpo | fua | Reserved I 

2 

MSB 

LOGICAL BLOCK ADDRESS 

LSB 

3 

1 4 

5 

| 6 

Reserved 

| 7 

TRANSFER LENGTH 

8 

9 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when an XPWRITE command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
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with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
XPWRITE command shall be evaluated for extent reservation conflicts. XPWRITE commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
XPWRITE operation is prohibited by an extent reservation. 

See 6.1.5 for a definition of the dpo and fua bits. 

The logical block address field specifies the starting logical block address where the target shall read data 
from its medium. It also specifies the starting logical block address where the XOR result data shall be 
written to the medium. 

The transfer length field specifies the number of blocks that shall be read from the medium. It also 
specifies the number of blocks that shall be written to the medium. 
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6.2 Commands for optical memory block devices 

The commands for optical memory block devices shall be as shown in Table 43. 


Table 43 - Commands for optical memory block devices 



(continued) 
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The following codes are vendor-specific: 20h, 21 h, 22h, 23h, and COh through FFh. All remaining codes 
for optical memory block devices are reserved for future standardization. 


6.2.1 ERASE(IO) command 

The ERASE(10) command (see Table 44) requests that the device server erase the specified number of 
blocks starting at the specified logical block address on the medium. As used here, erased means either 
the medium shall be erased, or a pattern shall be written on the medium that appears to the device 
server as no data present. The blocks erased shall be considered blank for purposes of blank checking 
(see 5.2). The previous data recorded on the medium, if any, shall not be recoverable. 
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Table 44 - ERASE(IO) command 



If the logical unit is reserved, a reservation conflict shall occur when a ERASE(IO) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
ERASE(IO) command shall be evaluated for extent reservation conflicts as if it were a write operation. 
ERASE(IO) commands with a reservation conflict shall be terminated with CHECK CONDITION status 
and the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the ERASE(IO) operation is prohibited by an extent reservation. 

An erase all (era) bit of one indicates that all remaining blocks on the medium shall be erased. If the era 
bit is one and if the number of blocks is not zero, the device server shall return CHECK CONDITION, 
and the sense key shall be set to ILLEGAL REQUEST, with an additional sense code of INVALID FIELD 
IN CDB. 

See 6.1.2 for a description of the reladr bit and logical block address field. 

The transfer length specifies the number of contiguous logical blocks that shall be erased when the era 
bit is zero. If the era bit is zero a transfer length of zero indicates that no blocks shall be erased. This 
condition shall not be considered an error and no data shall be erased. Any other value indicates the 
number of logical blocks that shall be erased. 

This command shall be terminated with a status of RESERVATION CONFLICT if any reservation access 
conflict exists and no data shall be erased. 


Note 19 - This command allows the user to separate the erase and write operations. This may 
increase system performance in certain applications. 

6.2.2 ERASE(12) command 

The ERASE(12) command (see Table 45) requests that the device server erase the specified number of 
blocks starting at the specified logical block address on the medium. 
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Table 45 - ERASE(12) command 



If the logical unit is reserved, a reservation conflict shall occur when a ERASE(12) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
ERASE(12) command shall be evaluated for extent reservation conflicts as if it were a write operation. 
ERASE(12) commands with a reservation conflict shall be terminated with CHECK CONDITION status 
and the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the ERASE(12) operation is prohibited by an extent reservation. 

See the ERASE(10) command (6.2.1) for a description of the fields in this command. 


6.2.3 MEDIUM SCAN command 

The MEDIUM SCAN command (see Table 46) requests that the device server scan the medium for a 
contiguous set of written or blank logical blocks. 



If the logical unit is reserved, a reservation conflict shall occur when a MEDIUM SCAN command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The MEDIUM SCAN command shall be evaluated for extent reservation conflicts as if it 
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were a read operation. MEDIUM SCAN commands with a reservation conflict shall be terminated with 
CHECK CONDITION status and the sense key shall be set to DATA PROTECT with the appropriate 
additional sense code for the condition if any part of the MEDIUM SCAN operation is prohibited by an 
extent reservation. 

A written block search (wbs) bit of zero indicates that the scan is for blank blocks. A wbs bit of one 
indicates that the scan is for written blocks. 

An advanced scan algorithm (asa) bit of zero indicates that the scan area is scanned in sequential order 
(as selected by the rsd bit). An asa bit of one indicates to the device server that the written and blank 
areas within the scan area form contiguous extents (as opposed to scattered blocks). This indication is 
advisory to the device server. 


Note 20 - The purpose of the asa bit is to allow the device server to use a more advanced 
algorithm (such as a binary search) to locate the requested blocks. 


A reverse scan direction (rsd) bit of zero indicates the scan shall begin with the first logical block of the 
scan area. A rsd bit of one indicates the scan shall begin with the last logical block of the scan area. 

A partial results acceptable (pra) bit of zero indicates that the scan shall not be considered satisfied until 
a contiguous set of blocks is found within the scan area that is at least equal in size to the number of 
blocks requested, and meets the other criteria specified in the command descriptor block. A pra bit of 
one indicates that the scan may be satisfied by a contiguous set of blocks within the scan area that is 
less than the number of blocks requested, and meets the other criteria specified in the command 
descriptor block. 

See 6.1.2 for a description of the reladr bit and logical block address field. 

The parameter list length specifies the length in bytes of the parameter list that shall be transferred 
during the data-out buffer transfer. A parameter list length of zero indicates that the number of blocks 
requested field has a value of one, and the number of blocks to scan field has a value of zero. This 
condition shall not be considered an error. The contents of the parameter list are specified in Table 47. 



A link bit of zero indicates a non-linked command; if the scan is satisfied, the command shall be 
terminated with a CONDITION MET status. A REQUEST SENSE command may then be issued to 
determine the starting logical block address of the area that meets the request. If the scan is not 
satisfied and no error occurs, the command shall be terminated with GOOD status. 

A link bit of one indicates that a command is linked to the MEDIUM SCAN command; if the search is 
satisfied, CONDITION MET status is returned and the next command is executed. If the reladr bit in the 
next command is one, the logical block address of the next command is used as a displacement from the 
logical block address where the search was satisfied. If a linked scan is not satisfied, the command is 
terminated with a CHECK CONDITION status. A REQUEST SENSE command may then be issued. 


dpANS SCSI-3 Block Commands (SBC) 







A REQUEST SENSE command following a satisfied MEDIUM SCAN command shall: 


a) return a sense key of EQUAL if the scan was satisfied by a contiguous set of blocks equal in size 
to the number of blocks requested. If the pra bit is one and the scan was satisfied by a 
contiguous set of blocks less than the number of blocks requested, then a sense key of NO 
SENSE shall be returned; 

b) return the valid bit set to one; 

c) return the logical block address of the first logical block of the contiguous set of blocks that 
satisfied the scan criteria in the information bytes; 

d) return the number of contiguous logical blocks meeting the scan criteria in the command specific 
information bytes. 

A REQUEST SENSE command following an unsatisfied MEDIUM SCAN command shall: 

a) return a sense key of NO SENSE if no errors occurred during the command execution; 

b) return the valid bit set to zero. 

The number of blocks requested field specifies the number of blocks that meet the specified requirements. 
The number of blocks requested field, if zero, indicates that the scan shall not take place. This shall not 
be considered an error condition. 

The number of blocks to scan field specifies the length in blocks of the area to be scanned on the medium. 
The number of blocks to scan field, if zero, indicates that the scan shall continue for all remaining blocks 
on the medium or until the scan is satisfied. See 5.2.2 for a description of error reporting. 


6.2.4 READ(12) command 

The READ(12) command (see Table 48) requests that the device server transfer data to the application 
client from the medium. See the READ(10) command (6.1.5) for a complete description of the fields in 
this command. 



If the logical unit is reserved, a reservation conflict shall occur when a READ(12) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
READ(12) command shall be evaluated for extent reservation conflicts. READ(12) commands with a 
reservation conflict shall be terminated with CHECK CONDITION and the sense key shall be set to 
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DATA PROTECT with the appropriate additional sense code for the condition if any part of the READ(12) 
operation is prohibited by an extent reservation. 


6.2.5 READ DEFECT DATA(12) command 

The READ DEFECT DATA(12) command (see Table 49) requests that the device server transfer the 
medium defect data to the application client. See the READ DEFECT DATA command (6.1.7) for a 
description of the fields in this command. 



If the logical unit is reserved, a reservation conflict shall occur when a READ DEFECT DATA(12) 
command is received from an initiator other than the one holding a logical unit reservation. The 
command shall be rejected with RESERVATION CONFLICT status if the reservation conflict is due to a 
logical unit reservation. READ DEFECT DATA(12) commands with a reservation conflict shall be 
terminated with RESERVATION CONFLICT status. The READ DEFECT DATA(12) command shall not 
be evaluated for extent reservation conflicts (e.g., extent reservations do not conflict with the READ 
DEFECT DATA(12) command). 


The READ DEFECT DATA(12) list header (see Table 50) contains an eight byte header, followed by 
zero or more defect descriptors. 
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See the description of the READ DEFECT DATA defect list (see 6.1.1.1) for a description of the fields in 
this header. 


6.2.6 READ GENERATION command 

The READ GENERATION command (see Table 51) requests that the device server transfer to the 
application client the maximum generation address for the logical block specified. 



If the logical unit is reserved, a reservation conflict shall occur when a READ GENERATION command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The READ GENERATION command shall be evaluated for extent reservation conflicts. 
READ GENERATION commands with a reservation conflict shall be terminated with CHECK 
CONDITION status and the sense key shall be set to DATA PROTECT with the appropriate additional 
sense code for the condition if any part of the READ GENERATION operation is prohibited by an extent 
reservation. 

See 6.1.2 for a description of the reladr bit and logical block address field. 

The READ GENERATION data is defined in Table 52. 


Table 52 - Maximum generation data block 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 








1 



MAXIMUM GENERATION ADDRESS 



(LSB) 

2 

Reserved 

3 

Reserved 


The maximum generation address field defines the maximum generation address available for the logical 
block address specified. 
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6.2.7 READ UPDATED BLOCK(IO) command 

The READ UPDATED BLOCK(10) command (see Table 53) requests that the device server transfer 
data to the application client from the specified generation and logical block. 


Table 53 - READ UPDATED BLOCK(IO) command 


Bit 

Byte 

7 

6 5 4 3 2 1 0 

0 

OPERATION CODE (2Dh) 

1 

Reserved I dpo | fua | Reserved I reladr 

2 

(MSB) 

3 


4 

LOGICAL BLOCK ADDRESS 

5 

(LSB) 

6 

Latest 

(MSB) 

7 


GENERATION ADDRESS (LSB) 

8 

Reserved 

9 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when a READ UPDATED BLOCK(IO) 
command is received from an initiator other than the one holding a logical unit reservation. The 
command shall be rejected with RESERVATION CONFLICT status if the reservation conflict is due to a 
logical unit reservation. The READ UPDATED BLOCK(IO) command shall be evaluated for extent 
reservation conflicts. READ UPDATED BLOCK(IO) commands with a reservation conflict shall be 
terminated with CHECK CONDITION status and the sense key shall be set to DATA PROTECT with the 
appropriate additional sense code for the condition if any part of the READ UPDATED BLOCK(IO) 
operation is prohibited by an extent reservation. 

See 6.1.5 for a description of the cache control bits (dpo and fua). 

See 6.1.2 for a description of the reladr bit and logical block address field. 

One block of data is transferred during the data-in buffer transfer. 

The latest bit determines the meaning of the generation address field. A latest bit of zero indicates that 
the generation address is specified relative to the first generation of the block; generation address zero 
specifies the first generation. Increasing generation addresses specify later generations. 

A latest bit of one indicates that the generation address is specified relative to the latest generation of the 
block; generation address zero specifies the most recent generation. Increasing generation addresses 
specify earlier generations. 

If the requested generation does not exist, the command shall be terminated with CHECK CONDITION 
status and the sense key shall be set to BLANK CHECK with the additional sense code set to 
GENERATION DOES NOT EXIST. 

This command shall be terminated with a status of RESERVATION CONFLICT if any reservation access 
conflict exists and no data shall be transferred. 


6.2.8 SET LIMITS(12) command 

The SET LIMITS(12) command (see Table 54) defines the range where subsequent linked commands 
may operate. See the SET LIMITS command (6.1.13) for a description of the fields in this command. 
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If the logical unit is reserved, a reservation conflict shall occur when a SET LIMITS(12) command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The SET LIMITS(12) command shall be evaluated for extent reservation conflicts. An 
overlap with an extent reservation of any type shall be detected as a reservation conflict. SET 
LIMITS(12) commands with a reservation conflict shall be terminated with CHECK CONDITION status 
and the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the SET LIMITS(12) operation is prohibited by an extent reservation. 


6.2.9 UPDATE BLOCK command 

The UPDATE BLOCK command (see Table 55) requests that the device server logically replace data on 
the medium with the data sent during the data-out buffer transfer. 



If the logical unit is reserved, a reservation conflict shall occur when an UPDATE BLOCK command is 
received from an initiator other than the one holding a logical unit reservation. The command shall be 
rejected with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit 
reservation. The UPDATE BLOCK command shall be evaluated for extent reservation conflicts as if it 
were a write operation. UPDATE BLOCK commands with a reservation conflict shall be terminated with 
CHECK CONDITION status and the sense key shall be set to DATA PROTECT with the appropriate 
additional sense code for the condition if any part of the UPDATE BLOCK operation is prohibited by an 
extent reservation. 


See 6.1.2 for a description of the reladr bit and logical block address field. 
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One block of data is transferred during the data-out buffer transfer. 


Note 21 - See the MODE Parameters (7.1.4.3) for a description of the behavior of the UPDATE 
BLOCK command relative to the enable blank check (ebc) bit. 


This standard does not define the result of a WRITE command issued to a block previously updated by 
an UPDATE BLOCK command when blank checking is disabled. It is recommended that the device 
server inhibit this behavior. 

A logical block may be updated until the alternate block area is exhausted. The alternate blocks used for 
the update operation shall not be reported in the READ CAPACITY data. If the alternate block area is 
exhausted, the command shall be terminated with CHECK CONDITION and the sense key shall be set to 
MEDIUM ERROR, and the additional sense code set to NO DEFECT SPARE LOCATION AVAILABLE. 

If the report updated block read (rubr) bit specifies posting of recovered errors for a read operation of a 
logical block that has had a successful update operation performed, and a recovered error occurs the 
command shall terminate with a CHECK CONDITION status and the sense key shall be set to 
RECOVERED ERROR with the additional sense code set to UPDATED BLOCK READ. See 0 for a 
description of the rubr bit. 


6.2.10 VERIFY(IO) command 

The VERIFY command (see Table 56) requests that the device server verify the data on the medium. 



If the logical unit is reserved, a reservation conflict shall occur when a VERIFY(IO) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
VERIFY(IO) command shall be evaluated for extent reservation conflicts as if it were a read operation. 
VERIFY(IO) commands with a reservation conflict shall be terminated with CHECK CONDITION status 
and the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the VERIFY(IO) operation is prohibited by an extent reservation. 

If the MODE SELECT command is implemented, and the verify error recovery parameters page is also 
implemented, then the current settings in that page define the verification criteria. If the verify error 
recovery parameters page is not implemented, then the verification criteria is vendor-specific. 

A byte check (bytchk) bit of zero causes a medium verification to be performed with no data comparison. 
A bytchk bit of one causes a byte- by-byte compare of the data written on the medium and the data 
transferred from the application client. The data shall be transferred as it would be for a WRITE 
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command. If the compare is unsuccessful, for any reason, the device server shall return CHECK 
CONDITION status and the sense key shall be set to MISCOMPARE with the appropriate additional 
sense code for the condition. 


A blank verify (blkvfy) bit of zero indicates that a verification that the blocks are blank is not requested. A 
blank verify (blkvfy) bit of one causes a verification that the blocks are blank. 

If the bytchk is one and the blkvfy bit is one the device server shall return CHECK CONDITION status 
and the sense key shall be set to ILLEGAL REQUEST with the additional sense code set to INVALID 
FIELD IN CDB. 

See 6.1.5 for a description of the cache control bit (dpo). See 6.1.2 for a description of the reladr bit and 

LOGICAL BLOCK ADDRESS field. 

The verification length specifies the number of contiguous logical blocks of data or blanks that shall be 
verified. A verification length of zero indicates that no logical blocks shall be verified. This condition 
shall not be considered as an error. Any other value indicates the number of logical blocks that shall be 
verified. 


6.2.11 VERIFY(12) command 

The VERIFY(12) command (see Table 57) requests that the device server verify the data on the 
medium. See the VERIFY(IO) command (6.2.10) for a description of the fields in this command. 



If the logical unit is reserved, a reservation conflict shall occur when a VERIFY(12) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
VERIFY(12) command shall be evaluated for extent reservation conflicts as if it were a read operation. 
VERIFY(12) commands with a reservation conflict shall be terminated with CHECK CONDITION status 
and the sense key shall be set to DATA PROTECT with the appropriate additional sense code for the 
condition if any part of the VERIFY(12) operation is prohibited by an extent reservation. 
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6.2.12 WRITE(IO) command 



If the logical unit is reserved, a reservation conflict shall occur when a WRITE(10) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
WRITE(IO) command shall be evaluated for extent reservation conflicts. WRITE(IO) commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
WRITE(IO) operation is prohibited by an extent reservation. 

An erase by-pass (ebp) bit of zero indicates that the block device shall default to the normal write 
operation. An ebp bit of one indicates that the device server is allowed to by-pass the erase operation 
prior to writing the data. When accessing write-once media and for direct-access block devices, the ebp 
bit shall be considered reserved. 

See 6.1.5 for a description of the cache control bits (dpo and fua). See 6.1.2 for a description of the 
reladr bit and logical block address field. 

The transfer length specifies the number of contiguous logical blocks of data that shall be transferred. A 
transfer length of zero indicates that no data shall be transferred. This condition shall not be considered 
an error and no data shall be written. Any other value indicates the number of logical blocks that shall be 
transferred. 

This command shall be terminated with a status of RESERVATION CONFLICT if any reservation access 
conflict exists, and no data shall be written. 
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6.2.13 WRITE(12) command 

The WRITE(12) command (see Table 59) requests that the device server write the data transferred from 
the application client to the medium. See the WRITE(IO) command (6.1.18) for a description of the 
fields in this command. 



If the logical unit is reserved, a reservation conflict shall occur when a WRITE(12) command is received 
from an initiator other than the one holding a logical unit reservation. The command shall be rejected 
with RESERVATION CONFLICT status if the reservation conflict is due to a logical unit reservation. The 
WRITE(12) command shall be evaluated for extent reservation conflicts. WRITE(12) commands with a 
reservation conflict shall be terminated with CHECK CONDITION status and the sense key shall be set 
to DATA PROTECT with the appropriate additional sense code for the condition if any part of the 
WRITE(12) operation is prohibited by an extent reservation. 

6.2.14 WRITE AND VERIFY(IO) command 

The WRITE AND VERIFY(IO) command (see Table 60) requests that the device server write the data 
transferred from the application client to the medium and then verify that the data is correctly written. 


Table 60 - WRITE AND VERIFY(IO) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (2Eh) 

1 

Reserved I dpo | Reserved | ebp | BYTCHK | RELADR 

2 

(MSB) 

3 

LOGICAL BLOCK ADDRESS 

4 


5 

(LSB) 

6 

Reserved 

7 

(MSB) 

8 

TRANSFER LENGTH (LSB) 

9 

CONTROL 


If the logical unit is reserved, a reservation conflict shall occur when a WRITE AND VERIFY(IO) 
command is received from an initiator other than the one holding a logical unit reservation. The 
command shall be rejected with RESERVATION CONFLICT status if the reservation conflict is due to a 
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logical unit reservation. The WRITE AND VERIFY(IO) command shall be evaluated for extent 
reservation conflicts. WRITE AND VERIFY(IO) commands with a reservation conflict shall be 
terminated with CHECK CONDITION status and the sense key shall be set to DATA PROTECT with the 
appropriate additional sense code for the condition if any part of the WRITE AND VERIFY(IO) operation 
is prohibited by an extent reservation. 

If the MODE SELECT command is implemented, and the verify error recovery parameters page is also 
implemented, then the current settings in that page define the verification criteria. If the verify error 
recovery parameters page is not implemented, then the verification criteria is vendor-specific. 

A byte check (bytchk) bit of zero causes a medium verification to be performed with no data comparison. 
A bytchk bit of one causes a byte-by-byte comparison of the data written on the medium and the data 
transferred from the application client. The data shall be transferred as it would be for a WRITE 
command. If the compare is unsuccessful, for any reason, the device server shall return CHECK 
CONDITION status and the sense key shall be set to MISCOMPARE with the appropriate additional 
sense code for the condition. 

An erase by-pass (ebp) bit of zero indicates that the block device shall default to the normal write 
operation. An ebp bit of one indicates that the device server is allowed to by-pass the erase operation 
prior to writing the data. When accessing write-once media, the ebp bit shall be considered reserved. 

See 6.1.5 for a description of the cache control bit (dpo). See 6.1.2 for a description of the reladr bit 
and logical block address field. 

The transfer length specifies the number of contiguous logical blocks of data that shall be transferred. A 
transfer length of zero indicates that no logical blocks shall be transferred. This condition shall not be 
considered as an error and no data shall be written. Any other value indicates the number of logical 
blocks that shall be transferred. 

6.2.15 WRITE AND VERIFY(12) command 

The WRITE AND VERIFY(12) command (see Table 61) requests that the device server write the data 
transferred from the application client to the medium and then verify that the data is correctly written. 

See the WRITE AND VERIFY(IO) command (6.2.14) for a description of the bits in this command. 



If the logical unit is reserved, a reservation conflict shall occur when a WRITE AND VERIFY(12) 
command is received from an initiator other than the one holding a logical unit reservation. The 
command shall be rejected with RESERVATION CONFLICT status if the reservation conflict is due to a 
logical unit reservation. The WRITE AND VERIFY(12) command shall be evaluated for extent 
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reservation conflicts. WRITE AND VERIFY(12) commands with a reservation conflict shall be 
terminated with CHECK CONDITION status and the sense key shall be set to DATA PROTECT with the 
appropriate additional sense code for the condition if any part of the WRITE AND VERIFY(12) operation 
is prohibited by an extent reservation. 


6.3 Commands for write-once block devices 

The commands for write-once block devices shall be as shown in Table 62. 


Table 62 - Commands for write-once block devices 


Command name 

Operation code 

Type 

Subclause 


EQIlH' 7 - 

0 



39h 

0 




0 

ANSI NCITS 301 SPC 

COPY AND VERIFY 

3Ah 

0 

ANSI NCITS 301 SPC 

INQUIRY 

12h 

M 

ANSI NCITS 301 SPC 

LOCK-UNLOCK CACHE 

36h 

0 



4Ch 

0 

ANSI NCITS 301 SPC I 


4Dh 

0 

ANSI NCITS 301 SPC I 

MEDIUM SCAN 

38h 

0 


MODE SELECT(6) 


0 


MODE SELECT(IO) 

55h 

0 

ANSI NCITS 301 SPC 

MODE SENSE(6) 

1Ah 

0 

ANSI NCITS 301 SPC 

MODE SENSED 0) 

5Ah 

0 

ANSI NCITS 301 SPC 

MOVE MEDIUM 

A5h 

0 

SMC 

qsbhhhhhhh 


OB 

3.3.4 

osbhhbhbbhi 


OB 

3.3.4 



OB 

3.3.4 


30h 

OB 



BOh 

OB 



32h 

OB 



B2h 

OB 



OBh 

OB 


PERSISTENT RESERVE IN 

5Eh 

O' 

ANSI NCITS 301 SPC 

PERSISTENT RESERVE OUT 

5Fh 

O 1 

ANSI NCITS 301 SPC 

PRE-FETCH 

34h 

0 

6.1.3 

PREVENT-ALLOW MEDIUM REMOVAL 

1 Eh 

0 

ANSI NCITS 301 SPC 


08h 

0 

6.1.4 


28h 

M 

6.1.5 


A8h 

0 

6.2.4 

| READ BUFFER 

3Ch 

0 

ANSI NCITS 301 SPC 


25h 

M 

6.1.6 

| READ ELEMENT STATUS 

B8h 

0 

SMC 



0 

6.1.8 



0 

6.1.9 1 

| RECEIVE DIAGNOSTIC RESULTS 


0 

ANSI NCITS 301 SPC i 


(continued) 


dpANS SCSI-3 Block Commands (SBC) 


















































The following command codes are vendor-specific: 02h, 05h, 06h, 09h, OCh, ODh, OEh, OFh, 10h, 11 h, 
13h, 14h, 19h, 20h, 21 h, 22h, 23h, 24h, 26h, 27h, 29h, and COh through FFh. All remaining command 
codes for write-once block devices are reserved for future standardization. 
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7 Parameters for block devices 


7.1 Parameters for direct-access block devices 

7.1.1 Diagnostic parameters 

This subclause defines the descriptors and pages for diagnostic parameters used with direct-access 
block devices. The diagnostic page codes for direct-access block devices are defined in Table 63. 

Table 63- Diagnostic page codes 


PAGE CODE 

Description 

Subclause 

00h 

40h 

40h 

41 h 

41 h 

01 h - 3Fh 

42h - 7Fh 

80h - FFh 

Supported diagnostic pages 

Translate address page - SEND DIAGNOSTIC 
Translate address page - RECEIVE DIAGNOSTIC 
Device status page - SEND DIAGNOSTIC 

Device status page - RECEIVE DIAGNOSTIC 
Reserved (for pages that apply to all device types) 
Reserved (for this standard) 

Vendor-specific paqes 

ANSI NCITS 301 SPC 

7.1.1.1 

7.1.1.2 

7.1.1.3 

7.1.1.4 

ANSI NCITS 301 SPC 


7.1.1.1 Translate address page - SEND DIAGNOSTIC 

The translate address page allows the application client to translate a logical block address, physical 
sector address, or physical bytes from index address into any one of the other formats. The address to 
be translated is passed to the device server with the SEND DIAGNOSTIC command and the results are 
returned to the application client by the RECEIVE DIAGNOSTIC RESULTS command. The format of the 
translate address page - SEND DIAGNOSTIC is shown in Table 64. The translated address is returned 
in the translate address page - RECEIVE DIAGNOSTIC RESULTS (see Table 65). 


Table 64 - Translate address page - SEND DIAGNOSTIC 


Bit 

Byte 

7 6 5 4 3 

2 1 0 

0 

PAGE CODE (40h) 

1 

Reserved 

2 

(MSB) 

3 

PAGE LENGTH (OOOAh) (LSB) 

4 

Reserved 

SUPPLIED FORMAT 

5 

Reserved 

TRANSLATE FORMAT 

6 

ADDRESS TO TRANSLATE 

13 



The supplied format field specifies the format of address to translate field. Valid values for this field 
are defined in the FORMAT UNIT command (see 6.1.1). If the device server does not support the 
requested format it shall terminate the SEND DIAGNOSTIC command with CHECK CONDITION status 
and the sense key shall be set to ILLEGAL REQUEST with the additional sense code set to INVALID 
FIELD IN PARAMETER LIST. 

The translate format field specifies the format the application client requests for the result of the 
address translation. Valid values for this field are defined in the FORMAT UNIT command (see 6.1.1). 

If the device server does not support the requested format it shall terminate the command with CHECK 
CONDITION status and the sense key shall be set to ILLEGAL REQUEST with the additional sense code 
set to INVALID FIELD IN PARAMETER LIST. 
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The address to translate field contains a single address the application client is requesting the device 
server to translate. The format of this field depends on the value in the supplied format field. The 
formats are described in 6.1.1.1. If the logical block format is specified the block address shall be in the 
first four bytes of the field with the remaining bytes set to zero. 

7.1.1.2 Translate address page - RECEIVE DIAGNOSTIC 

The translate address page allows the application client to translate a logical block address, physical 
sector address, or physical bytes from index address into any one of the other formats. The address to 
be translated is passed to the device server with the SEND DIAGNOSTIC command and the results are 
returned to the application client by the RECEIVE DIAGNOSTIC RESULTS command. The translated 
address is returned in the translate address page - RECEIVE DIAGNOSTIC (see Table 65). 


Table 65 - Translate address page - RECEIVE DIAGNOSTIC 


Bit 

Byte 

7 6 5 4 3 

2 1 0 

0 

page code (40h) 

1 

Reserved 

2 

(MSB) 

3 

PAGE LENGTH (LSB) 

4 

Reserved 

SUPPLIED FORMAT 

5 

rarea | altsec | alttrk | Reserved 

translated format 



6 

(MSB) 


translated address 1 

13 

(LSB) 



n 


n + 7 

translated address x (if required) 


The translate address page contains a four-byte page header that specifies the page code and length 
followed by two bytes that describe the translated address followed by zero or more translated 
address(s). 

The page length field contains the number of parameter bytes that follow. 

The supplied format field contains the value from the SEND DIAGNOSTIC command supplied format field 
(see 7.1.1.1). 

A reserved area (rarea) bit of zero indicates that no part of the translated address falls within a reserved 
area of the medium. A rarea bit of one indicates that all or part of the translated address falls within a 
reserved area of the medium (e.g., speed tolerance gap, alternate sector, vendor reserved area, etc.). If 
the entire translated address falls within a reserved area, the device server may not return a translated 
address. 

An alternate sector (altsec) bit of zero indicates that no part of the translated address is located in an 
alternate sector of the medium or that the device server is unable to determine this information. An 
altsec bit of one indicates that the translated address is physically located in an alternate sector of the 
medium. If the device server is unable to determine if all or part of the translated address is located in 
an alternate sector it shall set this bit to zero. 
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An alternate track (alttrk) bit of zero indicates that no part of the translated address is located on an 
alternate track of the medium. An alttrk bit of one indicates that part or all of the translated address is 
located on an alternate track of the medium or the device server is unable to determine if all or part of 
the translated address is located on an alternate track. 

The translated format field contains the value from the SEND DIAGNOSTIC command translate format 
field (see 7.1.1.1). 

The translated address field contains the address(es) the device server translated from the address 
supplied by the application client in the SEND DIAGNOSTIC command. This field shall be in the format 
specified in the translate format field. The different formats are described in 6.1.1.1. If the logical block 
format is specified, the block address shall be in the first four bytes of the field and the remaining bytes 
shall be set to zero. 

If the returned data is in the logical block or physical sector format and the address to be translated 
covers more than one address after it has been translated (e.g., accounting for speed tolerance or 
multiple physical sectors within a single logical block or multiple logical blocks within a single physical 
sector) the device server shall return all possible addresses that are contained in the area specified by 
the address to be translated. 

If the returned data is in bytes from index format, the device server shall return a pair of translated 
values for each of the possible addresses that are contained in the area specified by the address to 
translate field. Of the pair of translated values returned, the first indicates the starting location and the 
second the ending location of the area. 

7.1.1.3 Device status page - SEND DIAGNOSTIC 

The device status page allows the application client to query the device regarding operational status of 
the device. The format of the device status page - SEND DIAGNOSTIC is shown in Table 66. The 
device status information is returned in the device status page - RECEIVE DIAGNOSTIC. 
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7.1.1.4 Device status page - RECEIVE DIAGNOSTIC 

The device status page allows the application client to query the device regarding operational status of 
the device. The format of the device status page - RECEIVE DIAGNOSTIC is shown in Table 67. 


Table 67 - Device status page - RECEIVE DIAGNOSTIC 


Bit 

Byte 

7 6 5 4 3 2 

1 0 

0 

PAGE CODE (41 h) 

1 

Reserved 

2 

(MSB) 

3 

PAGE length (n-3) (LSB) 

4 


5 

Reserved 

6 

Reserved 1 SYNCHRONIZATION 

RPL 

7 

Reserved 1 ssis 

SSIE | SSSL 

8 


47 

Reserved 



48 


n 

Reserved 


The synchronization field is used to report whether or not the spindle has synchronized with the 
reference signal or to report that the synchronization is in progress. The definitions of values in this field 
are shown in Table 68. 


Table 68 - synchronization field 


Status 

Description 

00b 

Synchronization status reporting is not supported or the status is not determined. 

01b 

Spindle is synchronized with the reference signal. 

10b 

Spindle is not able to synchronize with the reference signal or no reference signal is present. 

11b 

Spindle is in process of synchronizing with the reference signal. 


If the logical unit has not been selected as a master, master control, or slave or if the reporting of 
synchronous status is not supported, the synchronous status shall be set to 00b. 

If no reference signal is being received but the logical unit is currently a master, slave, or master control, 
the synchronization field is set to 10b. 

Once the reference signal is received, the logical unit shall begin its internal synchronization, attempting 
to match the device's spindle speed to the reference signal. During this time, the synchronization field 
shall be set to 11 b. The amount of time required to achieve synchronization is not defined by this 
standard. 

If the logical unit is unable to synchronize to the reference signal, the logical unit shall set the 
synchronization field to 10b. The sense key shall be set to UNIT ATTENTION, the additional sense code 
shall be set to RPL STATUS CHANGE. 

Once the logical unit successfully synchronizes to the reference signal, if the synchronization signal is 
lost due to a loss of the reference signal or a malfunction, unit attention conditions shall be generated for 
all application clients and the synchronization field shall be set to 10b. The sense key shall be set to UNIT 
ATTENTION. If the logical unit has successfully achieved synchronization and then loses 
synchronization while executing a task and no other error occurs, then the device server shall return 
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CHECK CONDITION status and the sense key shall be set to RECOVERED ERROR if the logical unit is 
able to complete the task or HARDWARE ERROR if the logical unit is unable to complete the task with 
the appropriate additional sense code set to RPL STATUS CHANGE. The rotational position locking 
(rpl) field shall be returned as the current value found in the rigid disk geometry page (see Table 90). 

An synchronous spindle invalid signal (ssis) bit of zero indicates no signal is present or a valid 
synchronization signal is being received. A ssis bit of one indicates that the synchronous spindle signal 
received by the device was invalid or not recognized by the device as a valid synchronization signal. An 
example of this event is the receipt of synchronous signals from multiple masters. 

A synchronous spindle internal error (ssie) bit of zero indicates no internal electronic failure has been 
detected by the device. A ssie bit of one indicates that the synchronization spindle electronics has 
detected an internal failure and the spindle is not synchronized with the synchronization signal. 

A synchronization spindle signal loss (sssl) bit of zero indicates that a spindle synchronization signal is 
being received. A sssl bit of one indicates that the device detects receiving no synchronization signal. 

The above three synchronization status error reporting fields, ssis, ssie, and sssl, are used to indicate 
error conditions of a device set to master or slave spindle synchronization mode using the rigid disk 
geometry MODE SELECT page rpl field. A device not set as master or slave shall report zero in these 
fields. 


7.1.2 Log parameters 

This subclause defines the descriptors and pages for log parameters used with direct-access block 
devices. See ANSI NCITS 301 SPC for a detailed description of logging operations. The log page codes 
for direct-access block devices are defined in Table 69. 


Table 69 - Log page codes 


PAGE CODE 

Description 

Subclause 

01 h 

03h 

04h 

05h 

02h 

07h 

06h 

OOh 

08h 

09h - 2Fh 

3Fh 

30h - 3Eh 

Buffer overrun/under-run page 

Error counter page (read) page 

Error counter page (read reverse) page 

Error counter page (verify) page 

Error counter page (write) page 

Last n error events page 

Non-medium error page 

Supported log pages 

Format status page 

Reserved 

Reserved 

Vendor-specific pages 

ANSI NCITS 301 SPC 

ANSI NCITS 301 SPC 

ANSI NCITS 301 SPC 

ANSI NCITS 301 SPC 

ANSI NCITS 301 SPC 

ANSI NCITS 301 SPC 

ANSI NCITS 301 SPC 

ANSI NCITS 301 SPC 

7.1.2.1 
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7.1.2.1 Format status page 

This page (page code 08h) captures the state of the block device since the most recent successful 
FORMAT UNIT command was completed. Additionally, this page provides Defect Management 
information for the device server. Table 70 defines the parameter codes for the format status log page. 


Table 70 - Format status log page 


Parameter code 

Description 

OOOOh 

0001 h 

0002h 

0003h 

0004h 

0005h - 7FFFh 

8000h - FFFFh 

Format DATA OUT 

Grown defects during certification 

Total blocks reallocated during format 

Total new blocks reallocated 

Power on minutes since format 

Reserved 

Vendor-specific parameters 


Event counts are returned as a result of the LOG SENSE command. LOG SELECT shall not pre-set (a 
value other than zero) for any of the event counts listed in Table 70. Attempts to change these event 
counts by issuing a LOG SELECT with these fields set to non-zero values is not considered an error and 
shall have no effect on the saved values. 

All of the log parameters described above shall be reported as the value -1 (FFh in all bytes of the log 
parameter) if the most recent FORMAT UNIT command failed. Individual log parameters described 
above shall be reported as the value -1 if no such information is available. 

The format data out field contains the entire data-out buffer transfer of the most recently successful 
FORMAT UNIT operation completed. This includes the defect list header (4 bytes), the initialization 
pattern descriptor(s) if any (variable number of bytes), and the defect descriptor(s) if any (variable 
number of bytes). Refer to 6.1.1.1 for details about these fields. 

The grown defects during certification field is a count of the number of defects detected as a result of 
performing Certification during execution of a FORMAT UNIT command. This count reflects only those 
defects detected and replaced that were not already part of the plist or gust. If a Certification pass was 
not performed this field shall be returned with a zero value. 

The total blocks reallocated during format field is a count of the total number of blocks that have been 
reallocated since the completion of the last successful FORMAT UNIT command. 

The power on minutes since format field represents the unsigned number of usage minutes (power applied 
regardless of power state) that have elapsed since the most recently successful FORMAT UNIT 
command. 

Upon receiving the FORMAT UNIT command, the device server should set all fields within the format 
status log page to reflect no such information being available. Only upon successful completion of the 
FORMAT UNIT command should the device server update the affected fields. 

The target save disable (tsd) bit is always returned as 0 to indicate that the device server shall provide 
an implicit saving frequency. 

Note 22 - Removable media device servers may save log page information with the media in a 
vendor-specific manner and location. 


7.1.3 Mode parameters 

This subclause defines the descriptors and pages for mode parameters used with direct-access device 
types. 
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The mode parameter list, including the mode parameter header and mode block descriptor are described 
in ANSI NCITS301 SPC. 

The medium-type code field is contained in the mode parameter header (see ANSI NCITS 301 SPC). Table 
71 defines this field for direct-access block devices. 


Table 71 - Direct-access medium-type codes 


Code 

value 

Medium type 

OOh 

Default medium type (currently mounted medium type) 



01 h 

Flexible disk, 

single-sided; unspecified medium 



02h 

Flexible disk, double-sided; unspecified medium 






Flexible disks 




Diameter 

Bit density 

Track density 

Number 

Reference 


mm (in ) 

Bits/radian 

/ mm (/ini 

of sides 

standard 

05h 

200 (8,0) 

6 631 

1,9 (48) 

1 

ANSI X3.73 

06h 

200 (8,0) 

6 631 

1.9 (48) 

2 

None 

09h 

200 (8,0) 

13 262 

1,9 (48) 

1 

None 

OAh 

200 (8,0) 

13 262 

1,9 (48) 

2 

ANSI X3.121 

ODh 

130 (5,25) 

3 979 

1,9 (48) 

1 

ANSI X3.82 

12h 

130 (5,25) 

7 958 

1,9 (48) 

2 

ANSI X3.125 

16h 

130 (5,25) 

7 958 

3,8 (96) 

2 

ANSI X3.126 

1 Ah 

130 (5,25) 

13 262 

3,8 (96) 

2 

ISO IS 8630 

1 Eh 

90 (3,5) 

7 958 

5,3 (135) 

2 

ANSI X3.137 




Direct-access magnetic tapes 



Width 


Density ANSI Reference 



mm (in) 

Tracks 

ftDmm (ftDil 

standard 


40 h 

6,3 (0,25) 

12 

394 (10 000) 

None 


44h 

6,3 (0,25) 

24 

394 (10 000) 

None 



Code values 80h - FFh are vendor-specific. All remaining code values are reserved 


Notes: See Annex B for a bibliography with further information on standards. 


The device specific parameter field (see Table 72) is contained in the mode parameter header (see 
ANSI NCITS 301 SPC). 


Table 72- Device specific parameter 


Bit 


7 

WP 


6 


II 

Reserved 


5 4 _3 

|| DPOFUA || 


2 II 1 

Reserved 


0 


When used with the MODE SELECT command the write protect (wp) bit is not defined. 

When used with the MODE SENSE command a wp bit of zero indicates that the medium is write 
enabled. A wp bit of one indicates that the medium is write protected. 

When used with the MODE SELECT command, the dpofua bit is not used and the field is reserved. 

When used with the MODE SENSE command, a dpofua bit of zero indicates that the device server does 
not support the dpo and fua bits. When used with the MODE SENSE command, a dpofua bit of one 
indicates that the device server supports the dpo and fua bits (see 6.1.5). 

The density code field is contained in the mode parameter block descriptor (see ANSI NCITS 301 SPC). 
This field is reserved for direct-access block devices. 
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The mode page codes for direct-access block devices are shown in Table 73. 

Table 73- Mode page codes 


PAGE CODE 

Description 

Subclause 

08h 

Caching page 

7.1.3.1 

02h 

Disconnect-reconnect page 

ANSI NCITS 301 SPC 

05h 

Flexible disk page 

7.1.3.2 

03h 

Format device page 

7.1.3.3 

10h 

XOR control mode page 

7.1.3.10 

ICh 

Informational exceptions control page 

ANSI NCITS 301 SPC 

OBh 

Medium types supported page 

7.1.3.4 

OCh 

Notch and partition page 

7.1.3.5 

09h 

Peripheral device page 

ANSI NCITS 301 SPC 

ODh 

Power condition page 

7.1.3.6 

1Ah 

Power condition page 

ANSI NCITS 301 SPC 

01 h 

Read-write error recovery page 

7.1.3.7 

04h 

Rigid disk geometry page 

7.1.3.8 

07h 

Verify error recovery page 

7.1.3.9 

06h 

Reserved 


OEh-OFh 

Reserved 


11 h -1 Bh 

Reserved 


1 Dh -1 Fh 

Reserved 


OOh 

Vendor-specific (does not require page format) 


20h - 3Eh 

Vendor-specific (page format required) 


3Fh 

Return all pages (valid only for the MODE SENSE 
command) 



In some cases the mode pages do not apply to the entire logical unit (see the notch page 7.1.3.5) 
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7.1.3.1 Caching page 

The caching parameters page (see Table 74) defines the parameters that affect the use of the cache. 



The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one indicates that the device server is capable of saving the 
page in a non-volatile vendor-specific location. If the ps is one in MODE SENSE data then the page 
shall be savable by issuing a MODE SELECT command with the sp bit of one. 

The initiator control (ic) enable bit, when one, requests that the device server use the number of cache 
segments or cache segment size fields, dependent upon the Size bit, to control the caching algorithm rather 
than the device server’s own adaptive algorithm. 

The abort pre-fetch (abpf) bit, when one, with the dra bit equal to zero, requests that the device server 
abort the pre-fetch upon receipt of a new command. The abpf bit of one takes precedence over the 
Minimum Pre-fetch bytes. When the abpf bit is zero, with the dra bit equal to zero, the termination of 
any active pre-fetch is dependent upon caching page bytes 4 through 11 and is operation and/or vendor- 
specific. 

The caching analysis permitted (cap) bit, when one, requests that the device server perform caching 
analysis during subsequent operations. When zero, cap requests that caching analysis be disabled to 
reduce overhead time or to prevent nonpertinent operations from impacting tuning values. 

The discontinuity (disc) bit, when one, requests that the device server continue the pre-fetch across time 
discontinuities, such as across cylinders (or tracks in an embedded servo device), up to the limits of the 
buffer, or segment, space available for the pre-fetch. When zero, the disc requests that pre-fetches be 
truncated (or wrapped) at time discontinuities. 
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The size enable (size) bit, when one, indicates that the cache segment size is to be used to control caching 
segmentation. When size equals zero, the application client requests that the number of cache segments is 
to be used to control caching segmentation. Simultaneous use of both the number of segments and the 
segment size is vendor-specific. 

A write cache enable (wce) bit of zero specifies that the device server shall return GOOD status for a 
WRITE command after successfully writing all of the data to the medium. A wce bit of one specifies that 
the device server may return GOOD status for a WRITE command after successfully receiving the data 
and prior to having successfully written it to the medium. 

A multiplication factor (mf) bit of zero specifies that the device server shall interpret the minimum and 
maximum pre-fetch fields in terms of the number of logical blocks for each of the respective types of pre¬ 
fetch. An mf bit of one specifies that the device server shall interpret the minimum and maximum pre-fetch 
fields to be specified in terms of a scalar number that, when multiplied by the number of logical blocks to 
be transferred for the current command, yields the number of logical blocks for each of the respective 
types of pre-fetch. 

A read cache disable (rcd) bit of zero specifies that the device server may return data requested by a 
READ command by accessing either the cache or media. A rcd bit of one specifies that the device 
server shall transfer all of the data requested by a READ command from the medium (i.e., data shall not 
be transferred from the cache). 

The demand read retention priority field (see Table 75) advises the device server the retention priority to 
assign for data read into the cache that has also been transferred from the logical unit to the application 
client. 


Table 75 - Demand read retention priority and write retention priority 


Value 

Description 

Oh 

Indicates the device server should not distinguish between retaining the indicated data and 
data placed into the cache memory by other means (e.g., pre-fetch) 

1h 

Demand read retention priority; Data put into the cache via a READ command should be 
replaced sooner (has lower priority) than data placed into the cache by other means 
(e.g., pre-fetch) 


Write retention priority: Data put into the cache during a WRITE or WRITE AND VERIFY 
command should be replaced sooner (has lower priority) than data placed into the cache by 
other means (e.g., pre-fetch) 

Fh 

Demand read retention priority: Data put into the cache via a READ command should not be 
replaced if there is other data in the cache that was placed into the cache by other means 
(e.g., pre-fetch) and it may be replaced (i.e., it is not locked). 


Write retention priority: Data put into the cache during a WRITE or WRITE AND VERIFY 
command should not be replaced if there is other data in the cache that was placed into the 
cache by other means (e.g., pre-fetch) and it may be replaced (i.e., it is not locked). 

2h- Eh 

Reserved 


The write retention priority field advises the device server the retention priority to assign for data written 
into the cache that has also been transferred from the cache memory to the medium. 

An anticipatory pre-fetch occurs when data is placed in the cache that has not been requested. This 
may happen in conjunction with the reading of data that has been requested. All the following 
parameters give an indication to the device server how it should manage the cache based on the last 
READ command. An anticipatory pre-fetch may occur based on other information. All the remaining 
caching parameters are only recommendations to the device server and should not cause a CHECK 
CONDITION to occur if the device server is not able to satisfy the request. 
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The disable pre-fetch transfer length field specifies the selective disabling of anticipatory pre-fetch on 
long transfer lengths. The value in this field is compared to the number of blocks requested by the 
current READ command. If the number of blocks is greater than the disable pre-fetch transfer length, 
then an anticipatory pre-fetch is not done for the command. Otherwise the device server should attempt 
an anticipatory pre-fetch. If the pre-fetch disable transfer length is zero, then all anticipatory pre-fetching 
is disabled for any request for data, including those for zero logical blocks. 

The minimum pre-fetch field indicates either a number of blocks or a scalar multiplier of the transfer 
length, depending upon the setting of the mf bit. In either case, the resulting number of blocks is the 
number to pre-fetch regardless of the delays it might cause in executing subsequent commands. 

The pre-fetching operation begins at the logical block immediately after the last logical block of the 
previous READ command. Pre-fetching shall always halt before exceeding the end of the media. Errors 
that occur during the pre-fetching operation shall not be reported to the application client unless the 
device server is unable to, as a result of the error, execute subsequent commands correctly. In this case 
the error may be reported either immediately as an error for the current READ command, or as a 
deferred error, at the discretion of the device server and according to the rules for reporting deferred 
errors. 

If the pre-fetch has read more than the amount of data indicated by the minimum pre-fetch then pre¬ 
fetching should be terminated whenever another command is ready to execute. This consideration is 
ignored when the minimum pre-fetch is equal to the maximum pre-fetch. 

The maximum pre-fetch field indicates either a number of blocks or a scalar multiplier of the transfer 
length, depending upon the setting of the mf bit. In either case, the resulting number of blocks is the 
number to pre-fetch if the pre-fetch does not delay executing subsequent commands. 

The maximum pre-fetch field contains the maximum amount of data to pre- fetch into the cache as a result 
of one READ command. It is used in conjunction with the disable pre-fetch transfer length and maximum 
pre- fetch ceiling parameters to trade off pre-fetching new data with displacing old data already stored in 
the cache. 

The maximum pre-fetch ceiling field specifies an upper limit on the number of logical blocks computed as 
the maximum pre-fetch. If this number of blocks is greater than the maximum pre-fetch, then the number 
of logical blocks to pre-fetch shall be truncated to the value stored in the maximum pre-fetch ceiling field. 

Note 23 - If the mf bit is one the maximum pre-fetch ceiling field is useful in limiting the amount of 
data to be pre-fetched. 

The force sequential write (fsw) bit when one, indicates that multiple block writes are to be transferred 
over the SCSI bus and written to the media in an ascending, sequential, logical block order. When the 
fsw bit equals zero, the device server is allowed to reorder the sequence of writing addressed logical 
blocks in order to achieve a faster command completion. 

The logical block cache segment size (lbcss) bit when one, indicates that the cache segment size field units 
shall be interpreted as logical blocks. When the lbcss bit equals zero the cache segment size field units 
shall be interpreted as bytes. The lbcss shall not impact the units of other fields. 

The disable read-ahead (dra) bit, when one, requests that the device server not read into the buffer any 
logical blocks beyond the addressed logical block(s). When the dra bit equals zero, the device server 
may continue to read logical blocks into the buffer beyond the addressed logical block(s). 

The vendor-specific (vs) bits may optionally be used for vendor-specific purposes. 

The number of cache segments advises the device server how many segments the host requests that the 
cache be divided into. 

The cache segment size field indicates the requested segment size in bytes. This standard defines that the 
cache segment size field is valid only when the size bit is one. 
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If the non cache buffer size field is greater than zero, this field advises the device server how many bytes 
the application client requests that the device server allocate for a buffer function when all other cache 
segments are occupied by data to be retained. If the number is at least one, caching functions in the 
other segments need not be impacted by cache misses to perform the SCSI buffer function. The impact 
of the non cache buffer size equals 0 or the sum of this field plus the cache segment size greater than the 
buffer size is vendor-specific. 

7.1.3.2 Flexible disk page 

The flexible disk page (see Table 76) contains parameters for control and reporting of flexible disk 
device parameters. 



The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one indicates that the device server is capable of saving the 
page in a non-volatile vendor-specific location. 

Note 24 - This page is mainly intended for defining parameters of flexible disk devices, but may 
be used for other logical units, if applicable. 
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The transfer rate indicates the data rate of the peripheral block device. See Table 77 for examples of 
common transfer rates. 


Table 77 - Examples of transfer rates 


Value 
OOFAh 
012Ch 
01 F4h 
03E8h 
07D0h 
1388h 


Transfer rate _ 

250 kbit/s transfer rate 
300 kbit/s transfer rate 
500 kbit/s transfer rate 

1 mbit/s transfer rate 

2 mbit/s transfer rate 
5 mbit/s transfer rate 


The number of heads field specifies the number of heads used for reading and writing data on the medium. 
Heads used exclusively for servo information are excluded. 

The sectors per track field specifies the number of sectors per revolution per head. 

The data bytes per sector field specifies the number of bytes of data per sector that an application client 
can read or write. 

The number of cylinders field specifies the number of cylinders used for data storage. 

The starting cylinder for write precompensation field specifies the cylinder where write precompensation 
is to begin. Cylinders are numbered starting with zero. If the starting cylinder for write precompensation 
is equal to the value in the number of cylinders field, write precompensation shall be disabled by the 
device server. 

The starting cylinder for reduced write current field specifies cylinder where write current is reduced. 
Cylinders are numbered starting with zero. If the starting cylinder for reduced write current is equal to the 
value in the number of cylinders field, reduced write current shall be disabled by the device server. 

The device step rate field specifies the step rate in units of 100 us. This value may be rounded as defined 
in ANSI NCITS 301 SPC. A value of zero requests the device server to set its default value. 

The device step pulse width field specifies the width of the step pulse in microseconds. This value may be 
rounded as defined in ANSI NCITS 301 SPC. A value of zero requests the device server to set its 
default value. 

The head settle delay field specifies the head settle time in units of 100 us. This value may be rounded 
as defined in ANSI NCITS 301 SPC. A value of zero requests the device server to set its default value. 

If a true ready signal is not available, the motor on delay field specifies in tenths of a second the time that 
the device server shall wait before attempting to access the medium after the motor on signal is 
asserted. If a true ready signal is available, the motor on delay field specifies in tenths of a second the 
time that the device server shall wait for device ready status before aborting an attempt to access the 
medium. This value may be rounded as defined in ANSI NCITS 301 SPC. 

The motor off delay field specifies in tenths of a second the time that the device server shall wait before 
releasing the motor on signal after an idle condition exists. A value of FFh indicates that the motor on 
signal shall not be released. The START STOP UNIT command is not affected by this parameter. This 
value may be rounded as defined in ANSI NCITS 301 SPC. 

A true ready (trdy) bit of one specifies that a signal is provided that indicates the medium is ready to be 
accessed. 
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An start sector number (ssn) bit of zero specifies that sectors are numbered starting with zero. A ssn bit 
of one specifies that sectors are numbered starting with one. 


An motor on (mo) bit of zero indicates that pin 1 6 (motor on) shall be asserted. A mo bit of one specifies 
that pin 16 (motor on) shall remain released. This bit shall be set to one when using high capacity (192 
tracks per inch) devices and their pre-formatted diskettes. 

The step pulse per cylinder (sppc) field is used to specify the number of additional step pulses required 
per cylinder. Non-zero values allow a device to read a diskette formatted on a device with a lower 
number of tracks per inch. For example, a value of one allows a 96 track-per-inch device to access 
tracks on a diskette that was formatted for 48 tracks per inch. 

The write compensation field is used to specify the amount of write compensation to be used starting at 
the cylinder specified in the starting cylinder for write precompensation field. The correlation of any 
values used in this field to actual write precompensation time values is vendor-specific. If a zero is 
specified in this field, the device server shall use its default write precompensation value. This value 
may be rounded as defined in ANSI NCITS 301 SPC. 

The head load delay field specifies the head loading time in milliseconds. This value may be rounded as 
defined in ANSI NCITS 301 SPC. A value of zero requests the device server to set its default value. 

The head unload delay field specifies the head unloading time in milliseconds. This value may be rounded 
as defined in ANSI NCITS 301 SPC. A value of zero requests the device server to set its default value. 

The pin 34 field defines the usage of pin 34 of the flexible disk device interface. The use of this pin varies 
among flexible disk vendors and flexible disk devices. The settings allow the application client to select 
how pin 34 shall be used by the flexible disk interface. See Table 78. 


Table 78 - pin 34 field 


Bit 7 6 5 4 

Description of pin 34 use 

P 0 0 0 

Open 

P001 

Ready 

P 0 1 0 

Disk changed 

Notes: 


1 P is a polarity bit, where 0 is active low and 1 is active high 

2 All undefined values are reserved. 1 


The pin 2 field definition is vendor specific. 

The pin 4 field defines the usage of pin 4 of the flexible disk device interface. The use of this pin varies 
among flexible disk device vendors and flexible disk devices. The settings allow the application client to 
specify how pin 4 shall be used by the flexible disk interface. See Table 79. 


Table 79 - pin 4 field 


Bit 7 6 5 4 

Description of pin 4 use 

P 0 0 0 

Open 

P001 

In use 

P 0 1 0 

Eject 

P 1 0 0 

Head load 

Notes: 


1 P is a polarity bit, where 0 is active low and 1 is active high 

2 All undefined values are reserved. I 


The pin 1 field defines the usage of pin 1 of the flexible disk device interface. This use of this pin varies 
among flexible disk vendors and flexible disk devices. The settings allow the application client to specify 
how pin 1 shall be used by the flexible disk interface. See Table 80. 
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Table 80 - pin 1 field 


Bit 7 6 5 4 

Description of pin 34 use 

P 0 0 0 

Open 

P001 

Disk change reset 

Notes: 


1 P is a polarity bit, where 0 is active low and 1 is active high 

2 All undefined values are reserved. |! 


The medium rotation rate field specifies the speed where the medium rotates. The unit of measure is 
rotations per minute (e.g., 2 400 rpm). This field shall not be changed by a MODE SELECT command. 

7.1.3.3 Format device page 

The format device page (see Table 81) contains parameters that specify the medium format. 



The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one indicates that the device server is capable of saving the 
page in a non-volatile vendor-specific location. 

Note 25 - If the application client changes any of the current physical parameters defined below, 
the device server may not be able to access the media until a subsequent FORMAT UNIT 
command has been successfully completed. 
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If the defect handling format parameters (tracks per zone, alternate sectors per zone, alternate tracks per 
zone and alternate tracks per logical unit) requested by the application client are not supported by the 
device server the device server may round these fields to acceptable values as described in ANSI 
NCITS 301 SPC. 

The tracks per zone field specifies the number of tracks per zone to use in dividing the capacity of the 
block device for the purpose of allocating alternate sectors. A value of zero means that one zone is 
defined for the entire block device. The last zone on the block device might not contain the same 
number of tracks as the previous zone(s). 

The alternate sectors per zone field specifies the number of sectors per zone the device server shall 
reserve for defect handling. The device server shall de-allocate these sectors from the application client 
addressable blocks during the FORMAT UNIT command. If the notch page is implemented and the nd 
bit of the notch page is one and the active notch field of the notch page is zero, then a value of zero 
indicates that no alternate sectors shall be reserved. Otherwise, a value of zero indicates that the 
number of alternate sectors is vendor specific. 

The alternate tracks per zone field specifies the number of tracks per zone the device server shall 
reserve for defect handling. The device server shall de-allocate these tracks from the application client 
addressable blocks during the FORMAT UNIT command. If the notch page is implemented and the nd 
bit of the notch page is one and the active notch field of the notch page is zero, then a value of zero 
indicates that no alternate tracks shall be reserved. Otherwise, a value of zero indicates that the number 
of alternate tracks is vendor specific. 

The alternate tracks per logical unit field specifies the number of tracks per logical unit the device server 
shall reserve for defect handling. The device server shall de-allocate these tracks from the application 
client addressable blocks during the FORMAT UNIT command. If the notch page is implemented and 
the nd bit of the notch page is one and the active notch field of the notch page is zero, then a value of 
zero indicates that no alternate tracks shall be reserved. Otherwise, a value of zero indicates that the 
number of alternate tracks is vendor-specific. 

The sectors per track field specifies the number of physical sectors included within each track. This 
number includes any alternate sectors the device server may allocate. A value of zero in this field during 
MODE SELECT indicates that the device server shall define the number of sectors per track. For block 
devices with a variable number of sectors per track, the value in MODE SELECT shall be zero and the 
value reported in MODE SENSE for the number of sectors per track is vendor specific. 

The data bytes per physical sector field specifies the number of data bytes per physical sector that the 
device server shall use. This value may be different than the logical block size reported in the MODE 
SELECT data. The device server shall return CHECK CONDITION status if it determines that the 
combination of this field and the sectors per track field exceed the capability of the medium. A value of 
zero indicates that the data bytes per physical sector is defined by the device server. 

For MODE SENSE the interleave field returns the same parameter that was used in the last completed 
format unit operation, The device server shall report this field as defined in the corresponding MODE 
SENSE command. For MODE SELECT this field shall be ignored. The interleave field shall be marked 
non-changeable and application clients shall send the value returned in MODE SENSE. 

The track skew factor field specifies the number of physical sectors between the last logical block of 
one track and the first logical block on the next sequential track of the same cylinder. 

The cylinder skew factor field specifies the number of physical sectors between the last logical block of 
one cylinder and the first logical block on the next sequential cylinder. 

The ssec bit of one indicates that the device server shall use soft sector formatting. 

The hsec bit of one indicates that the device server shall use hard sector formatting. The hsec bit and 
the ssec bit are mutually exclusive in MODE SELECT commands. 
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The combinations of sector formatting supported that are reported in response to a request for default 
values are defined in Table 82. 

Table 82 - Reporting of default sector formatting support 


SSEC 

HSEC 

Description 

0 

0 

Device server shall not return this combination 

1 

0 

Device server supports soft sector formatting only 

0 

1 

Device server supports hard sector formatting only 

1 

1 

Device server supports both soft and hard sector formatting 


The combinations sector formatting supported that are reported in response to a request for changeable 
values are defined in Table 83. 


Table 83 - Reporting of changeable sector formatting support 


SSEC 

HSEC 

Description 

0 

0 

Sector formatting not changeable 

1 

0 

Device server shall not return this combination 

0 

1 

Device server shall not return this combination 

1 

1 

Device server supports both soft and hard sector formatting 


The removable (rmb) bit of one indicates that the block device supports removable media. A rmb bit of 
zero indicates that the block device does not support removable media. The status of this bit shall be 
reflected in the INQUIRY command removable media bit (rmb). 

The surface (surf) bit of zero indicates that the device server shall allocate progressive addresses to all 
logical blocks within a cylinder prior to allocating addresses on the next cylinder. A surf bit of one 
indicates that the device server shall allocate progressive addresses to all logical blocks on a surface 
prior to allocating sector addresses on the next surface. 

Note 26 - If the device server supports savable parameters, all savable parameters for this 
application client, including those in page codes 3, 4, and 5, are saved to non-volatile memory 
when the save parameters bit (sp) in the command descriptor block is one. The savable 
parameters may also be saved to non-volatile memory during a FORMAT UNIT command (see 
6 . 1 . 1 ) 


7.1.3.4 Medium types supported page 

The medium types supported page (see Table 84) contains a list of the medium types implemented by 
the device server for logical units. 


Table 84 - Medium types supported page 


Bit 

Byte 

7 

6 

5 4 3 2 1 0 

0 

PS 

Reserved 

PAGE CODE (OBh) 

1 

PAGE LENGTH (06tl) 

2 

Reserved 

3 

Reserved 

4 

MEDIUM TYPE ONE SUPPORTED 

5 

MEDIUM TYPE TWO SUPPORTED 

6 

MEDIUM TYPE THREE SUPPORTED 

7 

MEDIUM TYPE FOUR SUPPORTED 


The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one shall indicate that the device server is capable of saving 
the page in a non-volatile vendor-specific location. 
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The code values for each medium type supported by the device server (up to four maximum), are 
reported in ascending order. If only the default medium type is supported, zero is reported. If less than 
four medium types are supported the unused entries shall be returned as zero. 


7.1.3.5 Notch and partition page 

The notch page (see Table 85) contains parameters for direct-access block devices that implement a 
variable number of blocks per cylinder and support this page. Each section of the block device with a 
different number of blocks per cylinder, than other sections, is referred to as a notch. 


Table 85 - Notch page 


Bit 

Byte 

7 

6 

5 4 3 2 1 0 

0 

PS 

Reserved 

PAGE CODE (OCh) 

1 

PAGE LENGTH (16h) 

2 

ND | lpn | Reserved 

3 

Reserved 

4 

(MSB) 


MAXIMUM NUMBER OF NOTCHES 

5 


(LSB) 

6 

(MSB) 


ACTIVE NOTCH 

7 


(LSB) 

8 

(MSB) 


STARTING BOUNDARY 

11 


(LSB) 

12 

(MSB) 


ENDING BOUNDARY 

15 


(LSB) 

16 

(MSB) 


PAGES NOTCHED 

23 


(LSB) 


The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one shall indicate that the device server is capable of saving 
the page in a non-volatile vendor-specific location. 

A notched device (nd) bit of zero shall indicate that the block device is not notched and that all other 
parameters in this page shall be returned as zero by the device server. A nd bit of one shall indicate that 
the block device is notched. For each supported active notch value this page defines the starting and 
ending boundaries of the notch. 

A logical or physical notch (lpn) bit of zero indicates that the boundaries are based on the physical 
parameters of the block device. The cylinder is considered most significant, the head least significant. A 
lpn bit of one indicates that the notch boundaries are based on logical blocks of the block device. 

The maximum number of notches field indicates the maximum number of notches supported by the logical 
unit. This field shall be reported as unchangeable. 

The active notch field indicates the notch that this and subsequent MODE SELECT and MODE SENSE 
commands shall refer to, until the active notch is changed by a subsequent MODE SELECT command. 
The value of the active notch shall be greater than or equal to 0 and less than or equal to the maximum 
number of notches. An active notch value of zero indicates that this and subsequent MODE SELECT 
and MODE SENSE commands refer to the parameters that apply across all notches. 
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The starting boundary field indicates the beginning of the active notch or, if the active notch is zero, the 
beginning boundary of the logical unit. If the lpn bit is one, then the four bytes represent a logical block 
address. If the lpn bit is zero, then the three most significant bytes shall represent the cylinder number 
and the least significant byte shall represent the head number. This field shall be reported as 
unchangeable. When used with the MODE SELECT command this field is ignored. 

The ending boundary field indicates the ending of the active notch or, if the active notch is zero, the 
ending of the logical unit. If the lpn bit is one, then the four bytes represent logical block address. If the 
lpn bit is zero, then the three most significant bytes shall represent the cylinder number and the least 
significant byte shall represent the head number. This field shall be reported as unchangeable. When 
used with the MODE SELECT command this field is ignored. 

Each notch shall span a set of consecutive logical blocks on the block device, the notches shall not 
overlap, and no logical block shall be excluded from a notch. 

The pages notched field is a bit map of the mode page codes that indicates pages that contain 
parameters that may be different for different notches. The most significant bit of this field corresponds 
to page code 3Fh and the least significant bit corresponds to page code OOh. If a bit is one, then the 
corresponding mode page contains parameters that may be different for different notches. If a bit is 
zero, then the corresponding mode page contains parameters that are constant for all notches. This field 
shall be reported as unchangeable. 


7.1.3.6 Power condition page 

The power condition page (see Table 86) is an optional alternative to the power condition page code 1 Ah 
defined in ANSI NCITS 301 SPC that provides the application client the means to control the length of 
time a block device delays before changing its power requirements. The power condition page code 1 Ah 
defined in ANSI NCITS 301 SPC is the preferred SCSI-3 definition for the power condition mode page 
for new implementations. There is no notification to the application client that a block device has entered 
into one of the power conditions except when returning from Sleep. (See 6.1.14) 

On the receipt of a command the device shall adjust itself to the power condition that allows the 
command to execute. The timer that maps to this power condition and any lower power condition timers 
shall be reset on receipt of a command. On completion of a command the timer associated with the 
power condition shall be restarted (see 5.1.4). 


Table 86 - Power condition page 


Bit 

Byte 

7 

6 

5 4 3 2 1 0 

0 

PS 

Reserved 

PAGE CODE (ODh) 

1 

PAGE LENGTH (OAh) 

2 

Reserved 

3 

Reserved 1 idle I standby 

4 

(MSB) 



5 


IDLE CONDITION TIMER 

6 



7 


(LSB) 

8 

(MSB) 



9 


STANDBY CONDITION TIMER ! 

10 



11 


(LSB) 


An idle bit of zero indicates a block device shall not enter the Idle condition. An idle bit of one indicates a 
block device shall use the Idle Condition Timer to determine the length of inactivity time to wait before 
entering the Idle condition. 
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If the idle bit is one, a value of zero in the Idle Condition Timer indicates the block device shall enter the 
Idle condition on completion of any command. 


A standby bit of zero indicates a block device shall not enter the Standby condition. A standby bit of one 
indicates a block device shall use the Standby Condition Timer to determine the length of inactivity time 
to wait before entering the Standby condition. 

If the standby bit is one and the idle bit is zero, a value of zero in the Standby Condition Timer indicates 
the block device shall enter the standby condition on completion of any command. 

If the standby bit is one and the idle bit is one, a value of zero in the Standby Condition Timer indicates 
the block device shall enter the Standby condition when the Idle Condition Timer equals zero. 

The idle condition timer field indicates the inactivity time in 100 millisecond increments that the block 
device shall wait before entering the Idle condition. 

The standby condition timer field indicates the inactivity time in 100 millisecond increments that the block 
device shall wait before entering the Standby condition. This timer shall only count if the Idle condition 
Timer is equal to zero. 

Figure 4 illustrates the relationships between the different power conditions and their timers (see also 
5.1.4, Figure 2, and Figure 3.) 



Figure 4 - Power conditions flowchart 


7.1.3.7 Read-write error recovery page 

The read-write error recovery page (see Table 87) specifies the error recovery parameters the device 
server shall use during any command that performs a read or write operation to the medium (e.g., 
READ(6), READ(10), WRITE(6), WRITE(IO), COPY, COMPARE, WRITE & VERIFY, etc.) 
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Table 87 - Read-write error recovery page 


Bit 

Byte 

7 

6 

5 4 3 2 1 0 

0 

PS 

Reserved 

PAGE CODE (01 h) 

1 

PAGE LENGTH (OAh) 

2 

AWRE | ARRE 1 TB I RC 1 EER 1 PER 1 DTE 1 DCR 

3 

READ RETRY COUNT 

4 

CORRECTION SPAN 

5 

HEAD OFFSET COUNT ! 

6 

DATA STROBE OFFSET COUNT 

7 

Reserved 

8 

WRITE RETRY COUNT 

9 

Reserved 

10 

(MSB) 


RECOVERY TIME LIMIT 

11 


(LSB) 


The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one shall indicate that the device server is capable of saving 
the page in a non-volatile vendor-specific location. 

An automatic write reallocation enabled (awre) bit of zero indicates that the device server shall not 
perform automatic reallocation of defective data blocks during write operations. 

An awre bit of one indicates that the device server shall enable automatic reallocation to be performed 
during write operations. The automatic reallocation shall be performed only if the device server has the 
valid data (e.g., original data in the buffer or recovered from the medium). The valid data shall be 
placed in the reallocated block. Error reporting as required by the error recovery bits (eer, per, dte, and 
dcr) shall be performed only after completion of the reallocation. The reallocation operation shall report 
any failures that occur. See the REASSIGN BLOCKS command (6.1.9) for error procedures. 

An automatic read reallocation enabled (arre) bit of zero indicates that the device server shall not 
perform automatic reallocation of defective data blocks during read operations. 

An arre bit of one indicates that the device server shall enable automatic reallocation of defective data 
blocks during read operations. All error recovery actions required by the error recovery bits (tb, eer, per, 
dte, and dcr) shall be executed. The automatic reallocation shall then be performed only if the device 
server successfully recovers the data. The recovered data shall be placed in the reallocated block. 

Error reporting as required by the error recovery bits shall be performed only after completion of the 
reallocation. The reallocation process shall present any failures that occur. See the REASSIGN 
BLOCKS command (6.1.9) for error procedures. 

A transfer block (tb) bit of zero indicates that such a data block shall not be transferred to the application 
client. A tb bit of one indicates that a data block that is not recovered within the recovery limits specified 
shall be transferred to the application client before CHECK CONDITION status is returned. The tb bit 
does not affect the action taken for recovered data. 

Note 27 - Fabricated data may be data already in the buffer or any other vendor-specific data. 
This bit may be used in image processing, audio, or video applications. 

A read continuous (rc) bit of zero indicates that error recovery operations that cause delays are 
acceptable during the data transfer. Data shall not be fabricated. 

A rc bit of one indicates the device server shall transfer the entire requested length of data without 
adding delays to perform error recovery procedures. This implies that the device server may send data 
that is erroneous or fabricated in order to maintain a continuous flow of data. The device server shall 
assign priority to this bit over conflicting error control bits (eer, dcr, dte, and per) within this byte. 
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The individual bit definitions for eer, per, dte and dcr are contained in Table 88. The combinations of 
these bits are explained in Table 89. 


Table 88 - Error recovery bit definitions 


EER 

PER 

DTE 

DCR 

Description 

1 




An enable early recovery (eer) bit of one indicates that the device 
server shall use of the most expedient form of error recovery first. 

This bit only applies to data error recovery and it does not affect 
positioning retries and the message system error recovery 
procedures. 

0 




An eer bit of zero indicates that the device server shall use as error 
recovery procedure that minimizes the risk of mis-detection or mis- 
correction. 


1 



A post error (per) bit of one indicates that the device server shall 
report recovered errors. 


0 



A per bit of zero indicates that the device server shall not report 
recovered errors. Error recovery procedures shall be performed 
within the limits established by the error recovery parameters. 



1 


A dte bit of one indicates that the device server shall terminate the 
data-in or data-out buffer transfer upon detection of a recovered error. 



0 


A dte bit of zero indicates that the device server shall not terminate 
the data-in or data-out buffer transfer upon detection of a recovered 
error. 




1 

A disable correction (dcr) bit of one indicates that error condition 
codes shall not be used for data error recovery. 




0 

A dcr bit of zero allows the use of error condition codes for data error 
recovery. 


Note 28 - An eer bit of one may imply an increase in the probability of mis-detection or mis- 
correction. An eer bit of zero allows the specified retry limit to be exhausted prior to using error 
correction codes. 
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Table 89 - Combined error recovery parameter descriptions 


EER 

PER 

DTE 

DCR 

Description 

0 

0 

0 

0 

The full number of retries (specified in the read, write or verify 
retry count field) and error correction are attempted to recover the 
data (eer and dcr equal 0). A CHECK CONDITION is not reported at 
the completion of the command for recovered errors (per equal 0). 

The command terminates with CHECK CONDITION status before the 
transfer count is exhausted only if an unrecoverable error is detected. 

If an unrecoverable data error occurred, the data in the block with the 
unrecoverable error may or may not be transferred to the application 
client depending on the setting of the transfer block (TB) bit (read 
operation only). 

0 

0 

0 

1 

Error correction is disabled (dcr equal one) so only the full number of 
retries (specified in the read, write or verify retry count field) are 
attempted to recover the data (eer equal 0). A CHECK CONDITION 
is not reported at the completion of the command for recoverable 
errors (per equal 0). The command terminates with CHECK 
CONDITION status before the transfer count is exhausted only if an 
unrecoverable error is detected. If an unrecoverable data error 
occurred, the data in the block with the unrecoverable error may or 
may not be transferred to the application client depending on the 
setting of the transfer block (TB) bit (read operation only). 

0 

0 

1 

0 

Invalid mode (per shall be set to one if dte is one). 1 

0 

0 

1 

1 

Invalid mode (per shall be set to one if dte is one). 1 

0 

1 

0 

0 

The full number of retries (specified in the read, write or verify 
retry count field) and error correction are attempted to recover the 
data (eer and dcr equal 0). The command terminates with CHECK 
CONDITION status before the transfer count is exhausted only if an 
unrecoverable error is detected. If an unrecoverable data error 
occurred, the data in the block with the unrecoverable error may or 
may not be transferred to the application client depending on the 
setting of the transfer block (TB) bit(read operation only). A CHECK 
CONDITION with a sense key of RECOVERED ERROR is reported at 
the completion of the command for any recoverable error that occurs 
(per equal 1). The information field in the sense data shall contain 
the logical block address of the last recovered error that occurred 
during the transfer. 

0 

1 

0 

1 

Error correction is disabled (dcr equal one) so only the full number of 
retries (specified in the read, write or verify retry count field) are 
attempted to recover the data (eer equal 0). The command 
terminates with CHECK CONDITION status before the transfer count 
is exhausted only if an unrecoverable error is detected. If an 
unrecoverable data error occurred, the data in the block with the 
unrecoverable error may or may not be transferred to the application 
client depending on the setting of the transfer block (TB) bit (read 
operation only). A CHECK CONDITION with a sense key of 
RECOVERED ERROR is reported at the completion of the command 
for any recoverable error that occurs (per equal 1). The information 
field in the sense data shall contain the logical block address of the 
last recovered error that occurred during the transfer. 


(continued) 
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Table 89 - (continued) 


EER 

PER 

DTE 

DCR 

Description 

0 

1 

1 

0 

The full number of retries (specified in the read, write or verify 
retry count field) and error correction are attempted to recover the 
data (eer and dcr equal 0). The command terminates with CHECK 
CONDITION status before the transfer count is exhausted if any error 
(recoverable or unrecoverable) is detected (dte equal 1). The 
information field in the sense data shall contain the logical block 
address of the block in error. If an unrecoverable data error occurs 
the data in the block with the error may or may not be transferred to 
the application client depending on the setting of the transfer block 
(TB) bit (read operation only.) 

0 

1 

1 

1 

Error correction is disabled (dcr equal one) so only the full number of 
retries (specified in the read, write or verify retry count field) are 
attempted to recover the data (eer equal 0). The command 
terminates with CHECK CONDITION status before the transfer count 
is exhausted if any error (recoverable or unrecoverable) is detected 
(dte equal 1). The information field in the sense data shall contain 
the logical block address of the block in error. If an unrecoverable 
data error occurs the data in the block with the error may or may not 
be transferred to the application client depending on the setting of the 
transfer block (TB) bit (read operation only). 

1 

0 

0 

0 

The fewest possible retries and error correction are attempted to 
recover the data (eer equal one and dcr equal 0). A CHECK 
CONDITION is not reported at the completion of the command for 
recoverable errors (per equal 0). The command terminates with 

CHECK CONDITION status before the transfer count is exhausted 
only if an unrecoverable error is detected. If an unrecoverable data 
error occurred, the data in the block with the unrecoverable error may 
or may not be transferred to the application client depending on the 
setting of the transfer block (TB) bit (read operation only). 

1 

0 

0 

1 

Invalid mode (dcr shall be set to zero if eer is one). 1 

1 

0 

1 

0 

Invalid mode (per shall be set to one if dte is one). 1 

1 

0 

1 

1 

Invalid mode (per shall be set to one if dte is one). 1 

1 

1 

0 

0 

The fewest possible retries and error correction are attempted to 
recover the data (eer equal one and dcr equal 0). The command 
terminates with CHECK CONDITION status before the transfer count 
is exhausted only if an unrecoverable error is detected. If an 
unrecoverable data error occurred, the data in the block with the 
unrecoverable error may or may not be transferred to the application 
client depending on the setting of the transfer block (TB) bit (read 
operation only). A CHECK CONDITION with a sense key of 
RECOVERED ERROR is reported at the completion of the command 
for any recoverable error that occurs (per equal 1). The information 
field in the sense data shall contain the logical block address of the 
last recovered error that occurred during the transfer. 

1 

1 

0 

1 

Invalid mode (dcr shall be set to zero if eer is one). 1 


(continued) 
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Table 89 - (concluded) 


EER 

PER 

DTE 

DCR 

Description 

1 

1 

1 

0 

The fewest possible retries and error correction are attempted to 
recover the data (eer equal one and dcr equal 0). The command 
terminates with CHECK CONDITION status before the transfer count 
is exhausted if any error (recoverable or unrecoverable) is detected 
(dte equal 1). The information field in the sense data shall contain 
the logical block address of the block in error. If an unrecoverable 
data error occurs the data in the block with the error may or may not 
be transferred to the application client depending on the setting of the 
transfer block (TB) bit (read operation only). 

1 

1 

1 

1 

Invalid mode (dcr shall be set to zero if eer is one). 1 

Note 1) If an invalid mode for the error recovery combination is sent by the application client the 
device server shall return CHECK CONDITION status and the sense key shall be set to ILLEGAL 
REQUEST with the additional sense code set to INVALID FIELD IN PARAMETER LIST 


The read and write retry count fields specify the number of times that the device server shall attempt its 
recovery algorithm during read and write operations, respectively. If the retry count field and the 
recovery time limit field are both specified in a MODE SELECT command, the field that requires the least 
time for data error recovery actions shall have priority. 

The correction span field specifies the size, in bits, of the largest data error burst that data error 
correction may be attempted. A correction span of zero specifies that the device server shall use its 
default value or that this field is not supported. 

The head offset count field specifies in two's-complement notation an incremental offset position from the 
track center to the radial position the heads shall be moved. The effect of this field on write operations is 
unspecified. A head offset count of zero indicates that no offset is specified. A positive value indicates 
moving in the direction of increasing logical block addresses. A negative value indicates moving in the 
direction of decreasing logical block addresses. Any value specified in this field does not preclude the 
device server from using positive or negative head offset during error recovery. However, after any error 
recovery is completed the device server shall return the head offset to the value specified in this field. 

Note 29 - The degree of offset for each incremental value and the number of valid values are 
vendor-specific. The number of valid values should be equal for the positive and negative head 
offset counts. 

The device server shall return CHECK CONDITION status and set the sense key to ILLEGAL REQUEST 
with the appropriate additional sense code for the condition if an unsupported head offset value is 
specified. The valid bit shall be set to one and the information field shall be set to the positive value of 
the maximum head offset count that is supported. The device server shall set the valid bit to zero if the 
device server is unable to determine the maximum head offset count supported. 

Note 30 - If the device server does not support this field, it returns a zero value in the MODE 
SENSE command). 

The data strobe offset count field specifies in two's-complement notation an incremental position to 
where the recovered data strobe shall be adjusted from its nominal setting. The effect of this field on 
write operations is unspecified. A value of zero indicates that no data strobe offset is specified. A 
positive value indicates movement in a positive direction as defined by the device server. A negative 
value indicates movement in the negative direction as defined by the device server. Any value specified 
in this field does not preclude the device server from using positive or negative data strobe offset during 
error recovery. However, after any error recovery is completed the device server shall return the data 
strobe offset to the value specified in this field. 

Note 31 - The degree of offset for each incremental value and the number of valid values are 
vendor-specific. The number of valid values should be equal for the positive and negative data 
strobe offset counts. 


dpANS SCSI-3 Block Commands (SBC) 


107 







The device server shall return CHECK CONDITION status and shall set the sense key to ILLEGAL 
REQUEST with the appropriate additional sense code for the condition if an unsupported data strobe 
offset count value is specified. The valid bit shall be set to one and the information field shall be set to 
the positive value of the maximum data strobe offset count that is supported. The device server shall 
set the valid bit to zero if the device server is unable to determine the maximum data strobe offset 
supported. 

Note 32 - If the device server does not support the data strobe offset count field, it returns a zero 
value in the MODE SENSE command. 

The recovery time limit field specifies in increments of one millisecond the maximum time duration that 
the device server shall use for data error recovery procedures. The device server may round this value 
as described in ANSI NCITS 301 SPC. The limit in this field specifies the maximum error recovery time 
allowed for any individual logical block. A recovery time limit of zero specifies that the device server shall 
use its default value. 

If both retry count and recovery time limit are specified, the field that specifies the recovery action of least 
duration shall have priority. 

7.1.3.8 Rigid disk device geometry page 

The rigid disk device geometry page (see Table 90) specifies parameters for direct-access block devices 
employing a rigid disk device. 



The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one shall indicate that the device server is capable of saving 
the page in a non-volatile vendor-specific location. 

Note 33 - This page is intended to define device geometry parameters of rigid disk devices. It 
may be used for other logical units if applicable. 

The number of cylinders field defines the number of physical cylinders used for data storage. 
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The number of heads field defines the physical number of heads used for data storage. Heads used 
exclusively for servo information are excluded. 

The starting cylinder for write precompensation field is the physical cylinder where write precompensation 
is to begin. The first cylinder is number zero. If the starting cylinder for write precompensation is equal to 
the value in the number of cylinders field, write precompensation shall be disabled by the device server. 

The starting cylinder for reduced write current field is the physical cylinder where write current is 
reduced. The first cylinder is number zero. If the starting cylinder for reduced write current is equal to 
the value in the number of cylinders field, reduced write current shall be disabled by the device server. 

The device step rate field indicates the step rate in 100 ns increments. The device server shall use the 
device step rate, greater than or equal to the device step rate specified. If the device server rounds this 
field it shall terminate the command as described in ANSI NCITS 301 SPC. A value of zero requests the 
device server to set its default value. 

The landing zone cylinder field indicates two's complement location where the device server shall position 
the disk heads. A negative value indicates that the heads are positioned below cylinder zero by that 
number of cylinders. A positive value greater than the number of cylinders indicates that the heads are 
positioned beyond the cylinders used for data storage at the cylinder location specified. A zero indicates 
that the default should be used. 

The rotational position locking (rpl) field is used for spindle synchronization as defined in Table 91. 


Table 91 - Rotational position locking 


RPL 

Description 

00b 

Indicates that spindle synchronization is disabled or not supported 

! 01b 

The device server operates as a synchronized-spindle slave 

! 10b 

The device server operates as a synchronized-spindle master 

i 11b 

The device server operates as a synchronized-spindle master control 


Note 34 - The signals and connectors used for rotational position locking are external to the 
SCSI bus and are not part of this American National Standard. 

If a device server fails to achieve synchronization it shall create a unit attention condition to all 
application clients. The sense key shall be set to UNIT ATTENTION and the additional sense code set to 
RPL STATUS CHANGE. 

If subsequent to achieving synchronization the device server detects a change of synchronization: 

a) and, if the logical unit task set currently does not contain any task for the initiator, the device 
server shall create a unit attention condition. The sense key shall be set to UNIT ATTENTION 
and the additional sense code set to RPL STATUS CHANGE; 

b) and, if the logical unit task set currently contains a task for the initiator, the device server shall 
return CHECK CONDITION status and the sense key shall be set to RECOVERED ERROR if 
the device server is able to complete the task or HARDWARE ERROR if the device server is 
unable to complete the task with the additional sense code set to RPL STATUS CHANGE. 

The rotational offset indicates the amount of rotational skew that the device server shall use when 
synchronized. The rotational skew is applied in the retarded direction (lagging the synchronized spindle 
master control). The value in the field is the numerator of a fractional multiplier that has 256 as its 
denominator (e.g., a value of 128 indicates a one-half revolution skew). A value of zero indicates that 
rotational offset shall not be used. This value may be rounded as defined in ANSI NCITS 301 SPC. The 
rotational offset is not used when a device server is configured as the synchronized-spindle master. 

The medium rotation rate indicates the speed of medium rotation. The unit of measure is rotations per 
minute (e.g., 3 600 rpm). 
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7.1.3.9 Verify error recovery page 

The verify error recovery page (see Table 92) specifies the error recovery parameters the device server 
shall use during the VERIFY command, the verify operation of the WRITE AND VERIFY command and 
the verify operation of the COPY AND VERIFY command. 


Table 92 - Verify error recovery page 


Bit 

Byte 

7 

6 

5 4 3 2 1 0 

0 

PS 

Reserved 

PAGE CODE (07h) 

1 

PARAMETER LENGTH (OAh) 

2 

Reserved I EEr | pEr | dtE | dcr 

3 

VERIFY RETRY COUNT 

4 

VERIFY CORRECTION SPAN 

5 

Reserved 

6 

Reserved 

7 

Reserved 

8 

Reserved 

9 

Reserved 

10 

(MSB) 


VERIFY RECOVERY TIME LIMIT 

11 


(LSB) 


The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one shall indicate that the device server is capable of saving 
the page in a non-volatile vendor-specific location. 

The awre bit as defined in the read-write error recovery page (see 7.1.3.7) applies to the WRITE AND 
VERIFY command. The VERIFY and COMPARE commands shall not perform automatic reallocation. 
The COPY and COPY AND VERIFY commands may perform automatic reallocation depending on the 
settings of the mode parameters. 

The eer, per, dte, and dcr bits are defined in 7.1.3.7. The combinations of these bits are defined in Table 
89. 

The verify retry count field specifies the number of times that the device server shall attempt its 
recovery algorithm during a verify operation. If the verify retry count and the verify recovery time limit are 
both specified, the one that requires the least time for data error recovery actions shall have priority. 

The verify correction span field specifies the size, in bits, of the largest burst data error that data error 
correction may be attempted. If the device server does not implement this field, a value of zero is 
returned in MODE SENSE data. 

The verify recovery time limit field specifies in increments of one millisecond the maximum time duration 
that the device server shall use error recovery procedures to recover data for an individual logical block. 
The device server may round this value as described in ANSI NCITS 301 SPC. If the verify retry count 
and the verify recovery time limit are both specified, the one that requires the least time for data error 
recovery actions shall have priority. 

Note 35 - To disable all types of correction and retries the application client should set the eer bit 
to zero, the per, dte, and dcr bits to one and the number of retries and recovery time limit to 
zero. 
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7.1.3.10 XOR control mode page 

The XOR control mode page (see Table 93) provides the initiator with the means to obtain or modify 
certain XOR operating parameters of the target. 


Table 93 - XOR control mode page 


Byte/Bit 

7 

6 

5 | 4 | 3 | 2 | 1 | 0 

1 o 

PS 

Reserved 

PAGE CODE (10h) 

1 

PAGE LENGTH (16h) ! 

I 2 

Reserved | xordis | Reserved 

i 3 

Reserved ! 

i 4 

MSB 

MAXIMUM XOR WRITE SIZE 

LSB 

5 

6 

7 

8 

MSB 

Reserved 

LSB 

! 9 

10 

! ii 

12 

MSB 

MAXIMUM REGENERATE SIZE 

LSB 

I 13 

14 

15 

1 16 

MSB 

MAXIMUM REBUILD READ SIZE 

LSB 

17 

18 

! 19 

! 20 

Reserved 

! 21 

22 

REBUILD DELAY 

23 


The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one shall indicate that the device server is capable of saving 
the page in a non-volatile vendor-specific location. 

An XOR disable (xordis) bit of zero enables the XOR operations within a device. An xordis bit of one 
disables the XOR operations within a device. If the xordis bit is one and an XOR command is sent to the 
target the command shall be terminated with CHECK CONDITION status and the sense data shall be set 
to ILLEGAL REQUEST with the additional sense code set to INVALID COMMAND OPERATION CODE. 

The maximum xor write size field specifies the maximum transfer length in blocks that the target accepts for 
a single XDWRITE EXTENDED, XDWRITE, or XPWRITE command. 

The maximum regenerate size field specifies the maximum regenerate length in blocks that the target 
accepts for the REGENERATE command. 

The maximum rebuild read size field specifies the maximum transfer length in blocks that the target shall use 
for READ commands during a rebuild operation. This field does not limit the rebuild size. 

The rebuild delay field is provided to allow allocation of the SCSI interconnect subsystem bandwidth. The 
rebuild delay field specifies the minimum time in milliseconds between successive READ commands 
during a rebuild operation. 
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7.1.4 Parameters for optical memory block devices 


7.1.4.1 Diagnostic parameters 

This subclause defines the descriptors and pages for diagnostic parameters used with optical memory 
block devices. 

The diagnostic page codes for optical memory block devices are defined in Table 94. 


Table 94 - Diagnostic page codes 


PAGE CODE 

Description 

Subclause 

00h 

40 h 

40 h 

41 h 

| 41 h 

01 h - 3Fh 

42h - 7Fh 

80h - FFh 

Supported diagnostic pages 

Translate address page - SEND DIAGNOSTIC 
Translate address page - RECEIVE DIAGNOSTIC 
Device status page - SEND DIAGNOSTIC 

Device status page - RECEIVE DIAGNOSTIC 
Reserved (for all device type pages) 

Reserved 

Vendor-specific pages 

ANSI NCITS 301 SPC 

7.1.1.1 

7.1.1.2 

7.1.1.3 

7.1.1.4 


7.1.4.2 Log parameters 

This subclause defines the descriptors and pages for log parameters used with optical memory block 
devices. 

The log page codes for optical memory block devices are defined in Table 95. 


Table 95 - Log page codes 


PAGE CODE 

Description 

Subclause 

01 h 

Buffer overrun/under-run page 

ANSI NCITS 301 SPC 

03h 

Error counter page (read) page 

ANSI NCITS 301 SPC 

04h 

Error counter page (read reverse) page 

ANSI NCITS 301 SPC 

05h 

Error counter page (verify) page 

ANSI NCITS 301 SPC 

02h 

Error counter page (write) page 

ANSI NCITS 301 SPC 

07h 

Last n error events page 

ANSI NCITS 301 SPC 

06h 

Non-medium error page 

ANSI NCITS 301 SPC 

OOh 

Supported log pages 

ANSI NCITS 301 SPC 

08h 

Format status page 

7.1.2.1 

09h - 2Fh 

Reserved 


3Fh 

Reserved 


30h - 3Eh 

Vendor-specific pages 



7.1.4.3 Mode parameters 

This subclause defines the descriptors and pages for mode parameters used with optical memory block 
devices. 

The mode parameter list, including the mode parameter header and mode block descriptor, are defined 
in ANSI NCITS 301 SPC. 
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The medium-type code field is contained in the mode parameter header (see ANSI NCITS 301 SPC). Table 
96 defines the medium-type code values used for optical memory block devices. 

Table 96 - Optical memory medium-type codes 


i Code 

Description 

OOh 

01 h 

02h 

03h 

04h 

05h 

06h 

07h - 7Fh 

80h - FFh 

Default (only one medium type supported) 

Optical read-only medium 

Optical write-only medium 

Optical reversible or erasable medium 

Combination of read-only and write-only medium 

Combination of read-only and reversible or erasable medium 
Combination of write-once and reversible or erasable medium 
RESERVED 

Vendor-specific 


The device specific parameter field is contained in the mode parameter header (see ANSI NCITS 301 
SPC). Table 97 defines the device specific parameter values used for optical memory block devices. 


Table 97 - Optical memory block device specific parameter 


I 


2 If 

Reserved 


0 

EBC 


When used with the MODE SELECT command the wp bit is not defined. When used with the MODE 
SENSE command, a write protected (wp) bit of zero shall indicate that the medium is write enabled. A 
wp bit of one shall indicate that the medium is write protected. For read-only media the wp bit is 
reserved. 

When used with the MODE SELECT command, the dpofua bit is reserved. When used with the MODE 
SENSE command, a dpofua bit of one indicates that the device server supports the dpo and fua bits (see 
6.1.5). 

For the MODE SELECT command, an enable blank check (ebc) bit of zero advises the device server to 
disable the blank checking operation of the medium during write operations or during an UPDATE 
BLOCK command. An ebc bit of one enables blank checking. If a non-blank block is found during a 
write operation, the command shall be terminated with a CHECK CONDITION and the sense key shall 
be set to BLANK CHECK with the appropriate additional sense code for the condition. If a blank block is 
found during an UPDATE BLOCK command, the command shall be terminated with a CHECK 
CONDITION status and the sense key shall be set to BLANK CHECK with the appropriate additional 
sense code for the condition. For read-only media, the ebc bit is reserved. 

For the MODE SENSE command, an ebc bit of zero indicates that blank checking of the medium during 
write operations is disabled. An ebc bit of one indicates that blank checking during write and update 
operations is enabled. For read-only media, the ebc bit is reserved. 

The density code field is contained in the mode parameter block descriptor (see ANSI NCITS 301 SPC). 
Table 98 defines the density code values used for optical memory block devices. 
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Table 98 - Optical memory density codes 



The mode page codes for optical memory block devices are shown in Table 99. 


Table 99 - Mode page codes 


PAGE CODE 

Description i 

Subclause 

! 08h 

Caching page 

7.1.3.1 

! OAh 

Control mode page 

ANSI NCITS 301 SPC 

02h 

Disconnect-reconnect page 

ANSI NCITS 301 SPC 

ICh 

Informational exceptions page 

ANSI NCITS 301 SPC 

OBh 

Medium types supported page 

7.1.3.4 

06h 

Optical memory page 

0 

09h 

Peripheral device page 

ANSI NCITS 301 SPC 

ODh 

Power condition page 

7.1.3.6 

01 h 

Read-write error recovery page 

7.1.3.7 

07h 

Verify error recovery page 

7.1.3.9 

03h - 05h 

Reserved 


OCh -1 Bh 

Reserved 


1Dh -1 Fh 

Reserved 


OOh 

Vendor-specific (does not require page format) 


20h - 3Eh 

Vendor-specific (page format required) 


3Fh 

Return all pages (valid only for the MODE SENSE command) 



7.1.4.4 Optical memory page 

The optical memory page (see Table 100) defines parameters for control of optical memory block 
devices. 


Table 100 - Optical memory page 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

PS 

Reserved 

PAGE CODE (06h) || 

1 

PARAMETER LENGTH (02h) 

2 

Reserved I rubr 

3 

Reserved 
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The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with 
the MODE SELECT command. A ps bit of one shall indicate that the device server is capable of saving 
the page in a non-volatile, vendor-specific location. 

A report updated block read (rubr) bit of zero indicates the device server shall not report an error when a 
command performs a successful read of a block that has been updated. A rubr bit of one indicates the 
device server shall terminate a command that performs a read of a block that has been updated with 
CHECK CONDITION status and the sense key shall be set to RECOVERED ERROR with the additional 
sense code set to UPDATED BLOCK READ. The data shall be transferred to the application client. The 
default state of the rubr bit for write-once block devices (as reported in the INQUIRY command) shall be 
one. 


7.1.5 Parameters for write-once block devices 

Refer to the parameters for optical memory block devices (see 7.1.4). 
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Annex A 

(informative) 

XOR command examples 


This annex provides XOR command examples in various redundancy group configurations. 

A.1 Storage array controller supervised XOR operations 
A.1.1 Update write operation 

Figure A.1 illustrates a read-modify-write operation supervised by a storage array controller. The example 
uses a supervising storage array controller, a data disk device (holding protected user data), and a parity 
disk device (holding check data). In this example, the data and parity devices are on separate SCSI 
physical interconnects, and thus are not capable of peer-to-peer interaction. Three SCSI commands are 
used: XDWRITE, XDREAD, and XPWRITE. 

The supervising storage array controller begins by sending user data to the data disk device using an 
XDWRITE command. It also initiates an XPWRITE command to the parity disk device (the supervising 
storage array controller does not yet have the intermediate XOR data for this command; the purpose of 
issuing the XPWRITE command at this time is to cause the parity disk device to begin reading XOR data 
from its medium to its buffer memory). 

The data disk device reads old user data from its medium, performs an XOR operation using the old user 
data and the user data from the supervising storage array controller, stores the resulting intermediate 
XOR data in its buffer memory, and writes the user data from the supervising storage array controller to 
its medium. The supervising storage array controller reads the resulting intermediate XOR data from the 
buffer memory by sending the data disk device an XDREAD command. 

The supervising storage array controller makes the resulting intermediate XOR data (read with the 
XDREAD command) available to the parity disk device for the already issued XPWRITE command. The 
parity disk device performs an XOR operation using the intermediate XOR data and the XOR data in its 
buffer memory. The resulting new XOR data is written to the medium. 

Supervising Data Disk Device 



Parity Disk Device 
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Figure A.1 - Update write operation 
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A. 1.2 Regenerate operation 

Figure A.2 illustrates a regenerate operation supervised by a storage array controller. The example uses 
a supervising storage array controller and three disk devices. In this example, all three disk devices are 
on separate SCSI physical interconnects, and thus are not capable of peer-to-peer interaction. Three 
SCSI commands are used: READ, XDWRITE, and XDREAD. 

The supervising storage array controller begins by issuing a READ command to disk device 1. The data 
received from this command is sent by the supervising storage array controller to disk device 2 using an 
XDWRITE command with a disable write bit of one. Disk device 2 reads data from its medium, performs 
an XOR operation using that data and the data received from the supervising storage array controller, 
and stores the resulting intermediate XOR data in its buffer memory. The supervising storage array 
controller retrieves the intermediate XOR data from the buffer memory by issuing an XDREAD command 
to disk device 2. The supervising storage array controller issues XDWRITE and XDREAD commands in 
the same manner to disk device 3. 

The resulting data from disk device 3 is the regenerated user data. 



Figure A.2 - Regenerate operation 
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A.1.3 Rebuild operation 

Figure A.3 illustrates a rebuild operation supervised by a storage array controller. The example uses a 
supervising storage array controller, two disk devices as the source devices, and one disk device as the 
rebuild device. In this example, all three disk devices are on separate SCSI physical interconnects, and 
thus are not capable of peer-to-peer interaction. Four SCSI commands are used: READ, XDWRITE, 
XDREAD, and WRITE. 

The supervising storage array controller begins by issuing a READ command to disk device 1. The data 
received from the READ command is sent by the supervising storage array controller to disk device 2 
using an XDWRITE command with a disable write bit of one. Disk device 2 reads data from its medium, 
performs an XOR operation using that data and the data received from the supervising storage array 
controller, and stores the resulting intermediate XOR data in its buffer memory. The supervising storage 
array controller retrieves the intermediate XOR data by sending an XDREAD command to disk device 2. 

The resulting data from disk device 2 is the "rebuilt" data and is sent to the device being rebuilt (disk 
device 3) using a WRITE command. 



Figure A.3 - Rebuild operation 
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A.2 Third-party XOR operations 

A.2.1 Update write operation 

Figure A.4 illustrates a third-party read-modify-write operation. The example uses a host, a data disk 
device (holding protected user data), and a parity disk device (holding check data). In this example, the 
data and parity devices are on the same SCSI physical interconnect, and thus are capable of peer-to- 
-peer interaction. Two SCSI commands are used: XDWRITE EXTENDED and XPWRITE. 

The host begins by sending user data to the data disk device using an XDWRITE EXTENDED command. 
The data disk device assumes initiator role and sends an XPWRITE command to the parity disk device 
(the data disk device does not yet have the intermediate XOR data for this command; the purpose of 
issuing the XPWRITE command at this time is to cause the parity disk device to begin reading XOR data 
from its medium to its buffer memory). 

The data disk device reads old user data from its medium, performs an XOR operation using the old user 
data and the user data from the host, stores the resulting intermediate XOR data in its buffer memory, 
and writes the user data from the host to its medium. 

The data disk device makes the resulting intermediate XOR data (from its buffer memory) available to 
the parity disk device for the already issued XPWRITE command. The parity disk device performs an 
XOR operation using the intermediate XOR data and the XOR data in its buffer memory. The resulting 
new XOR data is written to the medium. 


Host Data Disk Device 



Figure A.4 - Update write operation 
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A.2.2 Regenerate operation 

Figure A.5 illustrates a third-party regenerate operation. The example uses a host and three disk 
devices. In this example, all three disk devices are on the same SCSI physical interconnect, and thus are 
capable of peer-to-peer interaction. Three SCSI commands are used: REGENERATE, READ, and 
XDREAD. 

The host begins by issuing a REGENERATE command to disk device 1. Disk device 1 assumes initiator 
role and sends READ commands to disk device 2 and disk device 3. It also concurrently reads data 
from its own medium. Disk device 1 performs an XOR operation on the data from all three disk devices 
and stores the resulting intermediate XOR data (regenerated user data) in its buffer memory. The host 
retrieves this regenerated user data by sending an XDREAD command to disk device 1. 
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A.2.3 Rebuild operation 

Figure A.6 illustrates a third-party rebuild operation. The example uses a host, two disk devices as the 
source devices, and one disk device as the device being rebuilt. In this example, all three disk devices 
are on the same SCSI physical interconnect, and thus are capable of peer-to-peer interaction. Two SCSI 
commands are used: REBUILD and READ. 

The host begins by issuing a REBUILD command to the device being rebuilt (disk device 1). Disk device 
1 assumes the initiator role and issues READ commands to the source devices (disk device 2 and disk 
device 3). Disk device 1 performs an XOR operation on the data received from these two commands 
and writes the resulting rebuilt data to its medium. 



Figure A.6 - Rebuild operation 
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A.3 Hybrid subsystem XOR operations 
A.3.1 Regenerate operation 


Figure A.7 illustrates a regenerate operation on a hybrid system. The example uses a host and four disk 
devices as source devices. In this example, two of the disk devices are on one SCSI physical 
interconnect, and thus are capable of peer-to-peer interaction between themselves. The two other disk 
devices are on a different SCSI physical interconnect and are also capable of peer-to-peer interaction 
between themselves. Three SCSI commands are used: REGENERATE, READ, and XDREAD. 

The host begins by issuing a REGENERATE command to disk device 1. Disk device 1 assumes initiator 
role and sends a READ command to disk device 2. Disk device 1 also concurrently reads data from its 
own medium. Disk device 1 performs an XOR operation on the data from the two disk devices and 
stores the resulting partially regenerated user data in its buffer memory. The host retrieves this partially 
regenerated user data by sending an XDREAD command to disk device 1. 

The host then issues a REGENERATE command to disk device 3 with the partially regenerated user 
data that was obtained from disk device 1 (with the XDREAD command). Disk device 3 assumes the 
initiator role and sends a READ command to disk device 4. Disk device 3 also concurrently reads data 
from its own medium. Disk device 3 performs an XOR operation on the data from disk device 3, disk 
device 4, and the partially regenerated user data (from disk device 1). The host retrieves this 


regenerated user data by sending an XDREAD command to disk device 3. 

READ 



Figure A.7 - Regenerate operation 
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A.3.2 Rebuild operation 


Figure A.8 illustrates a rebuild operation on a hybrid system. In this example, two of the disk devices are 
on one SCSI physical interconnect, and thus are capable of peer-to-peer interaction between 
themselves. The two other disk devices are on a different SCSI physical interconnect and are also 
capable of peer-to-peer interaction between themselves. Four SCSI commands are used: 
REGENERATE, READ, XDREAD, and REBUILD. 

The host begins by issuing a REGENERATE command to a source device (disk device 1). Disk device 1 
assumes the initiator role and issues a READ command to disk device 2. Disk device 1 also 
concurrently reads data from its own medium. Disk device 1 performs an XOR operation on the data 
from the two disk devices and stores the resulting partially rebuilt data to its buffer memory. The host 
retrieves this partially rebuilt data by sending disk device 1 an XDREAD command. 

The host then issues a REBUILD command to disk device 3 (device being rebuilt) with the partially 
rebuilt data that was obtained from disk device 1 (with the XDREAD command). Disk device 3 assumes 
the initiator role and sends a READ command to disk device 4. Disk device 3 also concurrently reads 
data from its own medium. Disk device 3 performs an XOR operation on the data from disk device 3, 
disk device 4, and the partially rebuilt data (from disk device 1). The resulting rebuilt data is written to 
the medium in disk device 3. 


READ 



Figure A.8 - Rebuild operation 
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